nailing up an ipsec vpn?

[JimMcGrady]

I have a site to site ipsec vpn between two Palo firewalls.  A always initiates the tunnel to B. Is there a way i can make A always keep the tunnel up even when interesting traffic is not present?

[kiwi]

Hi @JimMcGrady ,

This was discussed before and this discussion is likely what you're looking for:

https://live.paloaltonetworks.com/t5/general-topics/always-up-ipsec/td-p/403923

Setting up tunnel monitoring is probably the way to go.

Kind regards,

-Kim.