topic Re: Monitoring Palo Alto VPN IPSEC tunnels on PRTG in Next-Generation Firewall Discussions

Monitoring Palo Alto VPN IPSEC tunnels on PRTG

jj-techadmin — Wed, 27 Nov 2024 07:44:13 GMT

Hi,

Our company recently acquired new Palo Alto PA440 and have set up VPN IPSEC tunnels (both Ikev1 and ikev2).

We currently need to montitor thise tunnels efficiently using PRTG to be alerted in case one of the tunnels go down.

Can anyone who did this before guide me how it can be done or suggest any alternative using PRTG? Or if you could share a guide/procedure that can assist with that?

Thank you,

Re: Monitoring Palo Alto VPN IPSEC tunnels on PRTG

OtakarKlier — Wed, 27 Nov 2024 18:08:40 GMT

Hello,

While there are several ways, what I usually do is have the monitoring system monitor an IP address on the other side of the tunnel, if it goes down, tunnel is down.

prtg->PAN->VPN->PAN->IP address that should always be up maybe even the IP of the PAN on the remote side.

Other things I have done is put in a /30 address on both sides of the VPN tunnel and monitor those.

Regards,