Request for Documentation on VPN and Routing Log Events

H.Pakdaman — Tue, 16 Sep 2025 16:59:54 GMT

Hello Everyone,

I am looking for official or community documents that explain VPN and Routing system log events in detail on Palo Alto firewalls.

Specifically, I’d like to:

Understand the meaning of log events such as ikev2-nego-ike-start, ipsec-key-install, ikev2-recv-p2-delete, routed-BGP-peer-left-established, etc.
See if there is a complete reference that lists all VPN and routing log events along with their explanations.
Learn how to better interpret these logs when troubleshooting site-to-site VPNs and BGP sessions.

If anyone has documents, references, or knowledge articles (from Palo Alto Networks or personal experience), I’d really appreciate your help.

Thanks in advance!

Best regards,
Hadi

Re: Request for Documentation on VPN and Routing Log Events

PavelK — Wed, 17 Sep 2025 04:27:09 GMT

in below links you will find a complete list of all syslog messages:

All VPN events you mentioned in your post fall into informational severity under vpn section.

The BGP event you mentioned in your post falls into high severity under routing section.

Unfortunately, the description of the events is brief without going into too much details.

If you are troubleshooting VPN related issue perhaps this KB: How to troubleshoot IPSec VPN Tunnel Down can help.

Kind Regards

Pavel