IPSec VPN Tunnel Throughput Monitoring

[Justin.Abendroth]

Is there a way within the palo alto firewalls to look at the active IPSec VPN tunnel throughput? I have a 3050 firewall with a handful of IPSec tunnels configured (individual and LSPVN tunnels) and I'm wondering how you would know if you were coming close to the throughput limit on IPSec traffic for the model of firewall you have.

[OtakarKlier]

Hello,

We send the netflow info to a 3rd party product that tells us what is going on via the different connections. I think this is the best way since the PAN doesnt really show this historical data but can send netflow to something that does.

Regards,

[MP18]

We have solar winds can i see the throughput there for all the ipsec tunnels?

[OtakarKlier]

---

@MP18 wrote:

We have solar winds can i see the throughput there for all the ipsec tunnels?

---

Hello,

Yes if you have the NTA module and are sending netflow from your tunnel interfaces to the SW collector.

Regards,

[MP18]

Hi,

How can i check I have NTA module?

Right now i am not sending netflow from tunnel interfaces to Solar.

Regards

Mike

[OtakarKlier]

Hello,

Browse to the Solarwinds default web page in your environment. Scroll all the way to the bottom and it will list every module you have installed. NPM is the base install that is required. if you have NTA it will also be listed.

Regards,

[MP18]

i have configured the tunnel interface with netflow profile.

my service route for netflow is management - default is this ok?

[OtakarKlier]

Hello,

That is fine as long as it is allowed from the MGMT interface to the SolarWInds collector.

Regards,

[MP18]

just curious how the management interface send data of the tunnel interface?