Permanent/Monitored VPN tunnel(s) down for Palo Alto Networks

Vendor

Palo Alto Networks

Description

Some VPN tunnels are set to be permanent, or monitored, to ensure they are always up. Indeni will alert if such VPN tunnels are down.

Remediation Steps

Review the cause for the tunnels being down.

How does this work?

This script uses the Palo Alto Networks API to retrieve the current status of the VPN tunnels (the equivalent of running "show vpn flow" in CLI). The script differentiates between alerts that are not "always on" (don't have a monitor set) and those that should be.

Why is this important?

This script uses the Palo Alto Networks API to retrieve the current status of the VPN tunnels (the equivalent of running "show vpn flow" in CLI). The script differentiates between alerts that are not "always on" (don't have a monitor set) and those that should be.

Without Indeni how would you find this?

The VPN tunnel state is visible through the web interface. Normally, an administrator would access it after a service outage is reported.


View Source Code