VPN dropping packets due to decryption errors for Palo Alto Networks

Vendor

Palo Alto Networks

Description

Indeni tracks critical error metrics for VPN tunnels and alerts when these are increasing.

Remediation Steps

Review the configurations on both sides of the tunnel.

How does this work?

This script uses the Palo Alto Networks API to retrieve the current status of the VPN tunnels (the equivalent of running "show vpn flow" in CLI). The script retrieves the decryption errors for each tunnel.

Why is this important?

This script uses the Palo Alto Networks API to retrieve the current status of the VPN tunnels (the equivalent of running "show vpn flow" in CLI). The script retrieves the decryption errors for each tunnel.

Without Indeni how would you find this?

Decryption error information is only accessible through the CLI to an administrator.


View Source Code