how to monitor encryption domains in VPN Palo Alto

[afalfaro]

Best regard

Equipment

We are currently experiencing an issue with one of our VPNS that we have configured against Azure on a 5200 series FW

The problem that arises is that of 10 configured domains, 5 are going down for no reason, since the traffic to these encryption domains is constant and this has generated different types of incidents.

Do you know or know of any way to monitor the encryption domains of a VPN through the Solarwinds platform? Or how can I monitor these domains

In addition to the above, what commands could I apply or review to debug the domains?

Thank you very much for the information and I look forward to your comments.

[OtakarKlier]

Hello,

Are you referring to the Proxy ID's? If the tunnel is up they should be passing traffic. With SolarWinds I usually have it monitor an IP address that the Solarwinds server can ping on the far end of the tunnel.

Check these articles they maybe useful.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm6WCAS

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSYCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh5CAC

Regards,