topic Monitor of IPSec tunnel in General Topics

Monitor of IPSec tunnel

jdprovine — Mon, 22 Oct 2018 14:48:35 GMT

What is the best way to monitor an IPSec tunnel on the PA, I don't see anything in the traffic logs at all just the systeme logs

Re: Monitor of IPSec tunnel

OtakarKlier — Mon, 22 Oct 2018 15:08:00 GMT

Hello,

What are you attempting to monitor, like up down status?

Regards,

Re: Monitor of IPSec tunnel

jdprovine — Mon, 22 Oct 2018 15:12:19 GMT

@OtakarKlier

No thats the easy part knowing if it is up or down, just watch the green balls LOL. I guess I was hoping to see something in the traffic logs but technically I probably have an encrypted tunnel that by passes all that and come right into the network. Guess I am checking to make sure that is normal and I have it set up correctly

Re: Monitor of IPSec tunnel

OtakarKlier — Mon, 22 Oct 2018 15:24:07 GMT

Hello,

If your PAN is the ipsec endpoint, then it will see the decrypted traffic. What I do is alwyas have the tunnel a different zone so I can create policies around the traffic. Also I can watch the traffic by selecting the source and destination zones.

Regards,

Re: Monitor of IPSec tunnel

jdprovine — Mon, 22 Oct 2018 15:27:48 GMT

@OtakarKlier

I created a rule to let the traffic in but when I search by the rule it shows no traffic passing on it so to speak though it is clearly being hit. I don't use panorama at all if that is why you are referring to as PAN

Re: Monitor of IPSec tunnel

OtakarKlier — Mon, 22 Oct 2018 15:31:26 GMT

Try searching by a known IP address on the tunnel as the source and see which policy it is hitting.

Re: Monitor of IPSec tunnel

jdprovine — Mon, 22 Oct 2018 15:58:14 GMT

@OtakarKlier

Nothing

Re: Monitor of IPSec tunnel

OtakarKlier — Mon, 22 Oct 2018 16:00:03 GMT

Maybe as destiantion and ping it so you can see traffic? Perhaps there is no traffic going over it (long shot I know).