nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Monitor Palo Alto IKE Phase 1 and 2 Status

jameslindsay

A tunnel has two phases. IKE passing authentication and encryption. IKE will only go down if the peer goes down or the inactive timers are hit. IPSEC tunnels are only built when traffic meets that source and destination. As soon as, that traffic is complete, the IPSEC tunnel drops. So, IPSEC tunnels will go up and down. There also may be source destinations that are rarely used, If SolarWinds can only see the IPSEC/ traffic side of the tunnel, then we won't be able to use. Those tunnels go up and down all the time. Some for a few minutes some for hours or in this case days. We need to be able to monitor the IKE phase

Find more posts tagged with

Status: None

Comments

KMSigma.SWI

Doesn't the product already monitor for this? (I'm not a VPN nor Palo Alto expert)

jameslindsay

Interesting, I've never seen that on my down tunnels. Maybe it is able to display value but, it is not something selectable in an alert definition. I'm told by support it does not an an enhancement request is required. Have you attempted to grab that status in an alert condition?