Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Palo Alto Tunnel interface monitoring

aaswi

I would like to see Palo Alto tunnel interface monitoring. much like regular Ethernet interface monitoring.

Find more posts tagged with

Status: None

Comments

FormerMember

This is a problem with Palo Alto, not Solarwinds.

dusk2dusk

I think this is an added SNMP feature in PanOS 7.x firmware. Still no ARP polling though but this is progress. We probably won't see ARP if at all until 8.x

aaswi

Ok, but we still can't show this info in Solarwinds, even if it wasn't a Palo Alto problem.

The reason for my request. Which pretty much holds true for any vpn appliance/device/concentrator/etc.

dusk2dusk

So below screen shot of me adding a device running PANOS 7.0.1 code. Is there something you can't do with this still? The Sub-interfaces are what I needed mostly but tunnels are in there as well.

aaswi

I want to see:

Active IPsec sessions
Active L2L sessions
Active LB sessions
Active sessions in total
Active SVC sessions
Active users
Groups with active users
Number of currently connected accounts
If a specific user account is currently offline or online

danielgilbey

Just had one of our Network team come & advise me (happily) that he'd got the Tunnel interfaces on one of our Palo Altos into Solarwinds (PA running PANOS 7.0.3) & while we can add the tunnels & Solarwinds 'sees' them, they show as down (when they are, in fact, up) & collecting statistics... ?

Anyone any thoughts on this? Apparently they did show as up momentarily, but now not...

ecklerwr1

Since it looks like snmp is working maybe try status polling with snmp instead of icmp?

superfly

We have the same thing happening here but the tunnels go up and down on regular intervals. And whilst they are showing as down, they are in fact still collecting stats.

The other option is to show them as 'unplugged' instead.

I will try ecklerwr1's suggestion of polling via snmp and see how that goes.