how to monitor encryption domains in VPN Palo Alto

aalfaro — Thu, 07 Mar 2024 15:46:39 GMT

Best regard

Equipment

We are currently experiencing an issue with one of our VPNS that we have configured against Azure on a 5200 series FW

The problem that arises is that of 10 configured domains, 5 are going down for no reason, since the traffic to these encryption domains is constant and this has generated different types of incidents.

Do you know or know of any way to monitor the encryption domains of a VPN through the Solarwinds platform? Or how can I monitor these domains

In addition to the above, what commands could I apply or review to debug the domains?

Thank you very much for the information and I look forward to your comments.

Re: how to monitor encryption domains in VPN Palo Alto

OtakarKlier — Thu, 07 Mar 2024 21:51:32 GMT

Hello,

Are you referring to the Proxy ID's? If the tunnel is up they should be passing traffic. With SolarWinds I usually have it monitor an IP address that the Solarwinds server can ping on the far end of the tunnel.

Check these articles they maybe useful.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm6WCAS

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSYCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh5CAC

Regards,

topic Re: how to monitor encryption domains in VPN Palo Alto in Next-Generation Firewall Discussions

how to monitor encryption domains in VPN Palo Alto

Re: how to monitor encryption domains in VPN Palo Alto