How to monitor IPSEC tunnels of PRISMA?

JuanMAbellan — Mon, 17 Nov 2025 09:37:04 GMT

Hello,

We are trying to monitor the IPSec tunnels of Prisma SD-WAN ION devices from PRTG, but we have not found a clear or documented method to achieve this.

We have already tried the following:

Polling various SNMP OIDs (none seem to provide tunnel status).
Testing SNMP traps that might relate to IPSec tunnels.
Querying the API, but we are not fully sure which endpoint should be used to retrieve a clear tunnel status (UP/DOWN or equivalent).

Any help would be appreciated.

Re: How to monitor IPSEC tunnels of PRISMA?

CC1234 — Tue, 20 Jan 2026 17:20:38 GMT

It can be tedious since each tunnel name correlates to an Element ID. I have the ION's sending syslog, then use syslog to look for STATUS="Not clear" and CODE="NETWORK_VPNLINK_DOWN" and graph off of that field. HTH.

*I use Logzilla for SYSLOG. It makes this a 5 minute task.

topic How to monitor IPSEC tunnels of PRISMA? in Prisma SD-WAN Discussions

How to monitor IPSEC tunnels of PRISMA?

Re: How to monitor IPSEC tunnels of PRISMA?