Skip to main content
chrispng
chrispng
Explorer
September 1, 2025
Solved

AUTO STITCH FOR IPSEV VPN TUNNEL

  • September 1, 2025
  • 2 replies
  • 934 views

Hello,

 

I am trying to find a way to make an auto stitch to trigger and work when a user disconects or connects on a remote ipsec tunnel and send an email. I have it set up but cant see emails comming. Any ideas?

 

 

FGT60F # config system automation-stitch

FGT60F(automation-stitch) # edit "VPNIPSEC"

FGT60F (VPNIPSEC) # show
config system automation-stitch
edit "VPNIPSEC"
set trigger "IPSEC VPN UP"
config actions
edit 1
set action "Email Notification"
set required enable
next
end
next
end

FGT60F (VPNIPSEC) #

 

 

config system automation-trigger

FGT60F (automation-trigger) # edit "VPNIPSEC"
new entry 'VPNIPSEC' added

FGT60F (VPNIPSEC) # show
config system automation-trigger
edit "VPNIPSEC"
next
end

 

config system automation-action

FGT60F (automation-action) # edit "VPNIPSEC"
new entry 'VPNIPSEC' added

FGT60F (VPNIPSEC) # show
config system automation-action
edit "VPNIPSEC"
next
end

Best answer by AEK

Probably a filter issue.

Can you remove the 3 filters and see if the event is triggered? If it works then add one by one to find which one is causing the issue.

2 replies

AEK
SuperUser
AEK
SuperUser
September 1, 2025

Hi Chris

First of all, under the automation menu, check if the related trigger count is incrementing when the needed IPsec event occurs. If not then you are using the wrong trigger.

Also the below tech tip may help.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Email-alert-notification-when-IPsec-VPN-tunnel-is/ta-p/196582

AEK
    chrispng
    chrispngAuthor
    Explorer
    September 2, 2025

    I tried the guide as stated too. trigger count is 0

    AEK
    SuperUser
    AEK
    SuperUser
    September 2, 2025

    It means you are probably using the wrong trigger.

    Try check in the VPN logs which message is generated when your event occurs. Once you find it you can use the same id in the trigger and it should work.

    AEK
      AEK
      SuperUser
      AEK
      SuperUser
      September 3, 2025

      In the VPN logs do you see such messages?

      ipsec_event.png

      This is the event id you should use in your trigger.

      AEK
        chrispng
        chrispngAuthor
        Explorer
        September 3, 2025

        εικόνα_2025-09-03_160253039.png

         

        thats what i am using and not working right now

        AEK
        SuperUser
        AEKAnswer
        SuperUser
        September 3, 2025

        Probably a filter issue.

        Can you remove the 3 filters and see if the event is triggered? If it works then add one by one to find which one is causing the issue.

        AEK
        Terms & ConditionsAccessibility statement