Ipsec tunnel monitoring issue

M.vyas — Tue, 20 May 2025 12:24:15 GMT

Hello All,

Iam having a issue with paloalto tunnel monitoring.

I have configured tunnel monitoring between Paloalto and fortigate firewall,

Inside tunnel i have 6 to 7 proxy ID.
one proxy id i have created for tunnel ip traffic and remaining all are normal lan to lan users traffic.

What i observerd proxy id of tunnel IP is fine and remaining proxy ID tunnel goes up and down frequently.

Any suggestions ow to make tunnel monitoring working.

Re: Ipsec tunnel monitoring issue

Raido_Rattameister — Wed, 21 May 2025 13:14:21 GMT

Palo will not try to keep tunnels up if there is no interesting traffic.

So if no lan to lan traffic and IPSec timeout expires then this tunnel is not re-established until lan to lan traffic returns.

topic Re: Ipsec tunnel monitoring issue in Next-Generation Firewall Discussions

Ipsec tunnel monitoring issue

Re: Ipsec tunnel monitoring issue