On the SafeUTM side, configure the connection settings in the Services -> IPSec -> Devices section.
On the Keenetic device side, use the following encryption protocol settings: