When configuring Cloud OnRamp for lease, what type of connection is created between the host VNet and the transit VNet?

When configuring Cisco SD-WAN Cloud OnRamp for IaaS (Infrastructure as a Service), an IPsec tunnel is established between the host Virtual Network (VNet) and the transit VNet. This IPsec tunnel provides a secure and encrypted connection for data exchange, ensuring confidentiality and integrity as traffic traverses the cloud environment. GRE tunnels are typically used for encapsulating various network layer protocols over an IP network but are not the primary secure connection method here. Azure peer links facilitate VNet peering within Azure, connecting VNets directly but without the specific security and routing policies enforced by SD-WAN. Azure private endpoints are used for securely connecting to Azure services over a private link, not for VNet-to-VNet transit in this context.