Your customer has asked you to set up tunnel monitoring on an IPsec VPN tunnel...

To set up tunnel monitoring on an IPsec VPN tunnel between two offices, the following steps are needed:

A.Create a monitoring profile: This profile defines the criteria for monitoring, such as the IP address to ping and the failure condition.

B.Add an IP address to each tunnel interface: Tunnel monitoring requires an IP address on each tunnel interface to send and receive monitoring pings.

E.Enable tunnel monitoring on each IPsec tunnel: This step activates the monitoring profile on the IPsec tunnel, ensuring that the tunnel is actively monitored and can trigger alerts or failover mechanisms if the tunnel goes down.

These steps ensure that the tunnel is properly monitored, allowing for proactive detection and response to connectivity issues.

References:

Palo Alto Networks - Configuring IPsec Tunnel Monitoring: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/vpns/site-to-site-vpn/configure-ipsec-tunnel-monitoring