SNMP for Monitoring Palo Alto Networks Devices

[SCoupland]

Hi there,

The link https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/management-features/extend... indicates that VPN tunnels can now be monitored. However the ifOperStatus and ifAdminStatus OIDs always respond that the tunnel interface is up.

Is there a way of monitoring via SNMP whether a VPN is up or down?

Regards,

SDC

[Remo]

With SNMP at least with traps ... but probably not exactly what you're looking for

[SCoupland]

Indeed. I'm looking to poll the VPN to confirm it's status. 

[Remo]

If snmp isn't a "must", then the API could be something for you ...

[OtakarKlier]

Hello,

Or maybe if you ahve a SIEM you can alert on the log that gets sent? One other round about way (yes its goofy) is to use something like OSPF between the two VPN endpoints and have the PAN send an email alert on any High/Ciritcal logs.

Just a thought.