topic General Interface status? in General Topics

General Interface status?

OMatlock — Tue, 03 Apr 2018 13:47:46 GMT

Hi folks,

We have a PA-200 over in London (on the recall list) that get complaints that the internet has intermittent connectivity issues.

Everytime I login to it, the interface (1/1) is up, green, and no indication of a problem.

Other than contacting the service provider about outage status, does anyone have method(s) on the firewall to determine if the internet connection experiences intermittent connectivity problems?

Re: General Interface status?

BPry — Tue, 03 Apr 2018 14:38:49 GMT

@OMatlock

I would put a Path-Monitoring policy in place on the PA-200 and simply see if you ever get any alerts that the path goes down.

Re: General Interface status?

OMatlock — Tue, 03 Apr 2018 16:24:20 GMT

@BPry

Thank you.

This is a standalone firewall. I see path monitoring in the HA section. Is that what I use?

I do not see any options to configure alerts. Is that somewhere else?

Looking for the documentation about it.

If you have any more feedback, appreciate it.

Re: General Interface status?

BPry — Tue, 03 Apr 2018 16:36:31 GMT

@OMatlock,

It's an HA feature however I don't believe HA needs to be configured for you to configure it and get alerts from it. The alerts that are generated will be (subtype eq ha) and (severity eq high) and (eventid eq path-monitor-down) for a path groups destination IP going down, and then will generate a (subtype eq ha) and (severity eq critical) and (eventid eq path-monitor-down) for a total path group failure. You can use that to build a filter to get the alerts delivered to your email through 'Log Settings'

Re: General Interface status?

Remo — Tue, 03 Apr 2018 16:48:29 GMT

@OMatlock

Another option would be path monitoring for a static route. This feature definately does not require HA to be enabled.

The documentation about this feature you can find here: https://www.paloaltonetworks.com/documentation/81/pan-os/pan-os/networking/static-routes/configure-path-monitoring-for-a-static-route

(This link points to PAN-OS 8.1 but in PAN-OS 8.0 it is the same)