IPSEC Tunnel Bandwidth Monitoring

[PMDInfrastructure]

Is there a built in function in PANOS to monitor bandwidth across IPSEC tunnels?

I can pull snapshots between IP's using ACC, but does not provide flow history similar to what Network Monitor does. Even setting up QOS only gives me the current snapshot.

Would NetFlow be able to monitor tunnel traffic?

Thanks,

Jim

[ssharma]

Hi,

If you IPSec tunnel belongs to specific zones then you can get various information

Hope this helps. Thank you.

[hshah]

Hello PMD,

Netflow works only with physical interfaces. It doesnt work with sub-interface or tunnel.

Kindly refer following document.

Can Netflow Data be Exported with Sub-Interface Names?

At best you can put tunnel interfaces in different zone named VPN and generate custom report as mentioned above.

Regards,

Hardik Shah

[PMDInfrastructure]

Thanks for the assist. Totally slipped my mind about generating a custom report.

Thanks again.

[ssharma]

Hi Jim,

Glad we could help. Thank you.