topic Re: IP sec tunnel in Next-Generation Firewall Discussions

IP sec tunnel

shirishkulkarni — Fri, 12 Apr 2024 04:46:19 GMT

Hi Team,

We have multiple IP-sec tunnels and want to clean up unused tunnels.

Like we have the option of an unused rule for security policy, or we will know by its hit count, is there any similar way we can find out an unused tunnel so we can delete it?

Re: IP sec tunnel

S_Williams901 — Thu, 18 Apr 2024 18:41:36 GMT

If a tunnel is green and not red, I wouldn't be cleaning up anything. I would start a list and get it out to business owners of those apps/vendors and make them tell you if they are in use or not. No reason to be making a massive mistake cleaning up a used tunnel when you don't know what is going on with it. Could be a tunnel for a once a year transaction.

Re: IP sec tunnel

shirishkulkarni — Fri, 19 Apr 2024 04:57:45 GMT

ok, we had issue with tunnel last month where tunnel was flapped.

I want to check since how long the tunnel is up or down, I filter with ('evenid eq tunnel-status-down') system log but dont see any logs same in CLI as well, how we get know since when the tunnel is up