We can do Monitoring
VPN Tunnel using Checkpoint itself
We have many tunnels on our checkpoint is
being used enterprise wide. I was not found any application or monitoring
mechanism for vpn tunnel Monitoring. whenever tunnel goes down, we come to know
only if partner or any team complains. So The solution I find this one to
monitor vpn tunnels.
Here is the way
1)
We are using Check Point gateways on
both sides of the VPN, the best way to do this is to set Permanent Tunnels in
the VPN Community. On the "Tunnel Management" screen of the VPN
community we can set up automatic Emails/SNMP Traps for when the tunnel falls
down and can't get back up. Once again permanent tunnels only works between
Check Point gateways.
2)
If the remote firewalls are not
Check Point, the best we can do under "Global Properties > Log and
Alert" is to set "VPN Configuration & Key Exchange Errors"
& "VPN Packet Handling Errors" to an Email/SNMP Trap to notify us
if a tunnel fails.
Comments
Post a Comment