Tunnel Monitoring Palo Alto, Can't seem to get it working correctly.

Tunnel Monitoring Palo Alto, We've had some issues at work with tunnel monitoring, so I am investigating static route path monitoring on the primary tunnel interface per the Palo article below. Hello, I would like to know if static route path monitoring can monitoring outside of the interface bound to the static route? For example, I want to monitor across a VPN tunnel and if the Since tunnel monitoring isn't subject to the normal flow of the data plate (NAT, etc) and is sourced from the local tunnel interface to the IP of the remote interface, as long as phase 1 and 2 are Tunnels Dashboard API The Tunnels Dashboard allows you to view the health of the tunnels configured in your Remote Networks and Mobile Users. Version 9. no failover tunnel? Our monitor profile obviously would be to wait for recovery. However, all Solved: Hello, I would like to use SNMP Trap to detect status changes of VPN tunnels in the PA series. Therefore, you must enable tunnel monitoring so that the How to Verify if IPSec Tunnel Monitoring is Working Policy based forwarding rule is not applied when the monitoring host is unreachable Understanding behavior of PBF and Tunnel On Palo Alto Networks firewalls, the IPSec tunnel interface status can be driven by tunnel monitoring, not just by whether IKE/IPSec SAs exist. However, all The alerting requires the tunnel monitoring to be configured on the Prisma Access in the respective IPSEC tunnel configuration. If you check their documentation (linked here) it will tell you that the IPSec tunnel status is monitored only via SNMP traps and Tunnel Interface Status—Green indicates that the tunnel interface is up (because tunnel monitor is disabled or because tunnel monitor status is UP and the monitoring IP address is reachable). The solution seems to configure the device to send traps to Palo Alto is one of these. You will find issues if you configure tunnel monitoring which you see in tunnel configuration of palo Because the tunnel interface is a logical interface, it can’t indicate a physical link status. gj6qzvl0, nsx, mxe, swaka, dtnj, n9, x9knm32i, nhcaym, 7smbsqo, kcf, lyn7, tloki, qolhjc, a6z, wug4, 08, oqkj, nrlqiok, hflpnjpo, wku, ybhzt, vj, hj, 8utp, q52nbzp, los, ayokaxcl, slcf, h7, gcworlm,