topic vpn community in Firewall and Security Management

vpn community

coskun_sanli — Fri, 23 Mar 2018 08:54:34 GMT

Hello
how to notice vpn community down/up via mail on R80.10

thank you

Re: vpn community

Marco_Valenti — Fri, 23 Mar 2018 10:36:38 GMT

Easy way - you can monitor the state of a tunnel on your security gateway through snmp and then with your monitoring software send an email

Hard way - probably with an user defined event in smart event it is possible to achieve this but I'm not sure about that

Re: vpn community

Zach_Rack — Fri, 23 Mar 2018 16:38:50 GMT

Marco ,That's exactly what we did .we leveraged sk63663 (to monitor VPN tunnels using SNMP ).

and we have already in place Network monitor software ; to watch and monitor any SNMP status ,and if there's something wrong with the VPN tunnel it would send an alert (email,text...etc) .

I'm not sure if Checkpoint Smart-event has the same capability to do the same function.

Re: vpn community

Marco_Valenti — Fri, 23 Mar 2018 17:13:47 GMT

we use it for install policy if you get some error in phase1 probably you can define a user defined event but it's a lot more hard , despite that I did not have good result with snmp monitoring with few false positive so we decided to live without it users are usually faster anyway

Re: vpn community

Timothy_Hall — Sun, 25 Mar 2018 14:24:38 GMT

One other option if both gateways are Check Point devices is to enable Permanent Tunnels (essentially Check Point's version of Dead Peer Detection) in the VPN community object, then set the "Tunnel Down" track to SNMP Trap or Mail Alert as shown here:

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com