I want to know how to configure domain isolation using IPsec? As I am new in it and have no idea. I learned that in our old tenant we have domain isolation with ipsec. And for new tenant will have servers and clients in on-prem as well in cloud, so in this situation what is best practices for this? and what are the things need to know from old tenant and how to configure this in a new tenant? please help me this as soon possible with setps to configure and set of questions need to know from the old tenant?