Palo Alto Tunnel interface monitoring

superfly99 wrote:

I will try ecklerwr1's suggestion of polling via snmp and see how that goes.

Unfortunately monitoring the Palo Alto via SNMP makes no difference to the tunnel going up and down. I think using the 'unplugged' option is the easiest way around it.

We have the same thing happening here but the tunnels go up and down on regular intervals. And whilst they are showing as down, they are in fact still collecting stats.

The other option is to show them as 'unplugged' instead.

I will try ecklerwr1​'s suggestion of polling via snmp and see how that goes.

Since it looks like snmp is working maybe try status polling with snmp instead of icmp?

Just had one of our Network team come & advise me (happily) that he'd got the Tunnel interfaces on one of our Palo Altos into Solarwinds (PA running PANOS 7.0.3) & while we can add the tunnels & Solarwinds 'sees' them, they show as down (when they are, in fact, up) & collecting statistics... ?

Anyone any thoughts on this? Apparently they did show as up momentarily, but now not...

I want to see:

• Active IPsec sessions
• Active L2L sessions
• Active LB sessions
• Active sessions in total
• Active SVC sessions
• Active users
• Groups with active users
• Number of currently connected accounts
• If a specific user account is currently offline or online

So below screen shot of me adding a device running PANOS 7.0.1 code. Is there something you can't do with this still?  The Sub-interfaces are what I needed mostly but tunnels are in there as well. 

Ok, but we still can't show this info in Solarwinds, even if it wasn't a Palo Alto problem. 

The reason for my request.  Which pretty much holds true for any vpn appliance/device/concentrator/etc.

I think this is an added SNMP feature in PanOS 7.x firmware.  Still no ARP polling though but this is progress.  We probably won't see ARP if at all until 8.x

This is a problem with Palo Alto, not Solarwinds.