VPN Tunnel Status Monitoring in GMS

VPN Tunnel Status Monitoring in GMS

 GMS can monitor the status (up/down) of VPN tunnels configured on managed appliances.  The status of the VPN tunnels on a managed unit can be seen on the Manage tab under the VPN | Monitor page:

The status of VPNs shown on this page is based on the status at the last time that GMS synchronized with the appliance.  To get the current status, click the ‘Synchronize Tunnel Status Information’ option.

 
Real-time VPN Monitoring:

For real-time VPN Monitoring, the managed unit can be configured for SNMP, so GMS is notified as soon as the tunnel status changes.  When this is done, GMS will reflect the current status of the VPN tunnel at Manage (tab) | VPN | Monitor.  GMS can then be configured to send an alert when the tunnel status changes.

To configure real-time VPN monitoring, follow these steps:

1. Enable SNMP on the managed appliance at System | SNMP (Manage | Appliance | SNMP from firmware version 6.5 and above):
   

   

   
   There is no need to specify an SNMP host, as GMS-managed units have a hidden host5 with the GMS host IP address.
2. 
   
   
   
3. On the managed appliance at Log | Settings, enable the ‘IPsec Tunnel Status Changed' category under Syslog column:
   

   

   
   
   
4. On the GMS gateway, if necessary, create a NAT Policy to forward SNMP traps to the GMS Agent:
   
   
   
5. On the GMS gateway, if necessary, create an Access Rule to allow forwarding of SNMP traps to the GMS server:
   
   
   
6. When the GMS Agent receives an SNMP trap from the managed appliance about a change in VPN Tunnel Status, GMS will update the tunnel status immediately at Manage (tab) | VPN | Monitor
   
   
7. To configure GMS to send an email alert when the VPN tunnel status changes, create a VPN Tunnel Status alert at Manage (tab) | Events | Alert Settings:
   
   
   **Use the Edit Content button to select which VPN tunnels should require alerts:                                                                         
8. When the VPN tunnel status changes, GMS will log the event in the UI log at Console | Log:
   
   GMS will also display the alert at Policies (Manage) | Events | Current Alerts:
   
   If GMS is configured to email the alert, the user will receive an alert when the VPN tunnel status changes.