Request for Documentation on VPN and Routing Log Events

[H.Pakdaman]

Hello Everyone,

I am looking for official or community documents that explain VPN and Routing system log events in detail on Palo Alto firewalls.

Specifically, I’d like to:

• Understand the meaning of log events such as ikev2-nego-ike-start, ipsec-key-install, ikev2-recv-p2-delete, routed-BGP-peer-left-established, etc.

• See if there is a complete reference that lists all VPN and routing log events along with their explanations.

• Learn how to better interpret these logs when troubleshooting site-to-site VPNs and BGP sessions.

If anyone has documents, references, or knowledge articles (from Palo Alto Networks or personal experience), I’d really appreciate your help.

Thanks in advance!

Best regards,
Hadi

[PavelK]

Hello @H.Pakdaman

in below links you will find a complete list of all syslog messages:

Informational System Log Messages

Low Severity System Log Messages

Medium System Log Messages

High System Log Messages

Critical System Log Messages

All VPN events you mentioned in your post fall into informational severity under vpn section.

The BGP event you mentioned in your post falls into high severity under routing section.

Unfortunately, the description of the events is brief without going into too much details.

If you are troubleshooting VPN related issue perhaps this KB: How to troubleshoot IPSec VPN Tunnel Down can help.

Kind Regards

Pavel