topic Re: IPSEC Tunnel monitor for policy based site to site VPN in Next-Generation Firewall Discussions

IPSEC Tunnel monitor for policy based site to site VPN

SShaikh647896 — Mon, 01 Apr 2024 09:37:26 GMT

We have connected site to site VPN tunnel with remote peered using policy based. so ca we monitor this IPsec VPN tunnel if it goes down with some trigger mechanism over email.

Re: IPSEC Tunnel monitor for policy based site to site VPN

PavelK — Mon, 01 Apr 2024 11:35:15 GMT

Hello @SShaikh647896

similar topic has been discussed in this thread: https://live.paloaltonetworks.com/t5/general-topics/alert-when-vpn-destination-stop-working/td-p/436028. Could you please check whether it is useful?

Kind Regards

Pavel

Re: IPSEC Tunnel monitor for policy based site to site VPN

SShaikh647896 — Tue, 02 Apr 2024 07:18:23 GMT

Hello @PavelK , yes it was useful. we also need to understand to enable tunnel monitoring what destination IP that can be use in tunnel monitor to monitor phase1 status.

Regards,

Sufiyan

Re: IPSEC Tunnel monitor for policy based site to site VPN

SShaikh647896 — Tue, 02 Apr 2024 18:21:51 GMT

While enabling tunnel monitor it is giving an error that "enabled tunnel monitoring while binding to tunnel interface tunnel.5 which has no IPV4 address assigned to it yet"

we are using policy based IPsec tunnel hence no IPv4 has assigned on tunnel interface.