topic Re: IPSEC Tunnel Bandwidth Monitoring in General Topics

IPSEC Tunnel Bandwidth Monitoring

PMDInfrastructure — Fri, 03 Oct 2014 20:04:56 GMT

Is there a built in function in PANOS to monitor bandwidth across IPSEC tunnels?

I can pull snapshots between IP's using ACC, but does not provide flow history similar to what Network Monitor does. Even setting up QOS only gives me the current snapshot.

Would NetFlow be able to monitor tunnel traffic?

Thanks,

Jim

Re: IPSEC Tunnel Bandwidth Monitoring

ssharma — Fri, 03 Oct 2014 20:08:07 GMT

Hi,

If you IPSec tunnel belongs to specific zones then you can get various information

Hope this helps. Thank you.

Re: IPSEC Tunnel Bandwidth Monitoring

hshah — Fri, 03 Oct 2014 20:13:24 GMT

Hello PMD,

Netflow works only with physical interfaces. It doesnt work with sub-interface or tunnel.

Kindly refer following document.

Can Netflow Data be Exported with Sub-Interface Names?

At best you can put tunnel interfaces in different zone named VPN and generate custom report as mentioned above.

Regards,

Hardik Shah

Re: IPSEC Tunnel Bandwidth Monitoring

PMDInfrastructure — Fri, 03 Oct 2014 21:20:11 GMT

Thanks for the assist. Totally slipped my mind about generating a custom report.

Thanks again.

Re: IPSEC Tunnel Bandwidth Monitoring

ssharma — Fri, 03 Oct 2014 21:37:54 GMT

Hi Jim,

Glad we could help. Thank you.