topic Re: IPSec VPN Tunnel Throughput Monitoring in General Topics

IPSec VPN Tunnel Throughput Monitoring

Justin.Abendroth — Mon, 17 Jun 2019 15:02:50 GMT

Is there a way within the palo alto firewalls to look at the active IPSec VPN tunnel throughput? I have a 3050 firewall with a handful of IPSec tunnels configured (individual and LSPVN tunnels) and I'm wondering how you would know if you were coming close to the throughput limit on IPSec traffic for the model of firewall you have.

Re: IPSec VPN Tunnel Throughput Monitoring

OtakarKlier — Mon, 17 Jun 2019 17:03:02 GMT

Hello,

We send the netflow info to a 3rd party product that tells us what is going on via the different connections. I think this is the best way since the PAN doesnt really show this historical data but can send netflow to something that does.

Regards,

Re: IPSec VPN Tunnel Throughput Monitoring

MP18 — Mon, 17 Jun 2019 20:48:24 GMT

We have solar winds can i see the throughput there for all the ipsec tunnels?

Re: IPSec VPN Tunnel Throughput Monitoring

OtakarKlier — Mon, 17 Jun 2019 20:49:56 GMT

@MP18 wrote:
We have solar winds can i see the throughput there for all the ipsec tunnels?

Hello,

Yes if you have the NTA module and are sending netflow from your tunnel interfaces to the SW collector.

Regards,

Re: IPSec VPN Tunnel Throughput Monitoring

MP18 — Mon, 17 Jun 2019 20:58:53 GMT

Hi,

How can i check I have NTA module?

Right now i am not sending netflow from tunnel interfaces to Solar.

Regards

Mike

Re: IPSec VPN Tunnel Throughput Monitoring

OtakarKlier — Mon, 17 Jun 2019 21:03:59 GMT

Hello,

Browse to the Solarwinds default web page in your environment. Scroll all the way to the bottom and it will list every module you have installed. NPM is the base install that is required. if you have NTA it will also be listed.

Regards,

Re: IPSec VPN Tunnel Throughput Monitoring

MP18 — Tue, 18 Jun 2019 16:45:40 GMT

i have configured the tunnel interface with netflow profile.

my service route for netflow is management - default is this ok?

Re: IPSec VPN Tunnel Throughput Monitoring

OtakarKlier — Tue, 18 Jun 2019 16:47:25 GMT

Hello,

That is fine as long as it is allowed from the MGMT interface to the SolarWInds collector.

Regards,

Re: IPSec VPN Tunnel Throughput Monitoring

MP18 — Tue, 18 Jun 2019 19:02:01 GMT

just curious how the management interface send data of the tunnel interface?