- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: vpn community
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
vpn community
Hello
how to notice vpn community down/up via mail on R80.10
thank you
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Easy way - you can monitor the state of a tunnel on your security gateway through snmp and then with your monitoring software send an email
Hard way - probably with an user defined event in smart event it is possible to achieve this but I'm not sure about that
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Marco ,That's exactly what we did .we leveraged sk63663 (to monitor VPN tunnels using SNMP ).
and we have already in place Network monitor software ; to watch and monitor any SNMP status ,and if there's something wrong with the VPN tunnel it would send an alert (email,text...etc) .
I'm not sure if Checkpoint Smart-event has the same capability to do the same function.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
we use it for install policy if you get some error in phase1 probably you can define a user defined event but it's a lot more hard , despite that I did not have good result with snmp monitoring with few false positive so we decided to live without it users are usually faster anyway
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
One other option if both gateways are Check Point devices is to enable Permanent Tunnels (essentially Check Point's version of Dead Peer Detection) in the VPN community object, then set the "Tunnel Down" track to SNMP Trap or Mail Alert as shown here:
--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com
now available at maxpowerfirewalls.com