email notification

[infotech]

Is it possible to set up a notification by email to let you know when one and only one vpn tunnel goes down? I also want to be able to turn it off once I am done troubleshooting

[hshah]

Hello Infotech,

I do not think its possible to do from PANW.

However, PANW forwards such kind of logs to syslog server, you can definitely configure syslog server to send such kind of trigger emails.

Regards,

Hardik Shah

[infotech]

Okay that makes sense

[hshah]

Hello Infotech,

Check what system log Firewall generates for VPN tunnel flap.

Configure actuall syslog server for email alert for that log.

Let me know if you have additional queries.

Regards,

Hardik Shah

[bat]

Hi infotech

You can configure email notification based on the severity of the log. How to Configure Email Alerts for System Logs?

Suppose if VPN down event generates a log entry of severity HIGH you can get that in your email based on the above setup but the caveat being you will get other HIGH severity log events as well.

There is no mechanism to send email only for VPN down event.

Hope it helps!

[infotech]

I will check that out thanks

[HULK]

Hello Infotech,

I hope this is the exact info, you are looking for: How To Alert on IPSec Tunnel Down?

Thanks

[infotech]

That will work. but it will alert for everything within a certain range of severity not just for a specific tunnel right?

[HULK]

Yes, you are correct.

PAN does not have an ability to send email alerts only for VPN down messages, but it will send email alerts for all SYSTEM logs with critical/High severity.

NOTE: If you think, there should be a way to achieve this, it's best you reach out to your SE or sales contact. If there are features we currently don't have but you would like to see added they can create a feature request for you.

Hope this helps.

Thanks