When creating IPSEC profiles, you can select to have them connect only if a WAN or Speedfusion VPN becomes disconnected. Very strangely, it does not support connection if an IPSEC profile is disconnected. There are some workaround for this, but it may be much simpler and more logical to simply have IPSEC profiles also show up in the list.
For IPsec we have a “Secondary Site” feature that can be enabled here:
Then you can specify another remote gateway IP address if the primary one is failed:
Steve, the secondary site address only works if the IPSEC profile can have an identical configuration for both gateways. If it needs a different config in any way, then that’s where the “activate on fail” option would give the needed flexibility.