Can I have an alert when a IPSEC is down in Fortigate 80C?

Forum|Forum|5 years ago
November 10, 2020
3 replies
4022 views

Hello!

I have a fortigate 80c and 60D with an IPSEC VPN .

Is there a way to use the log (or other tool) to send an email alert when the tunnel is down?

I couldn't see anything on the Log & Report tab

emnoc

New Member

Did you try to use the cli.

config alertemail setting

set IPsec-errors-logs enable

end

Ken Felix

Toshi_Esumi

SuperUser

Try Email Alert. Although FTNT says it's undocumented service, the default SMTP server setting under System->Settings->Email Service would work. Then you need to configure under Log & Report->Email Alert Setting. There is "IPsec tunnel errors" on/off slide switch under VPN section.

emnoc

New Member

Make sure your on the most update version I see your on a older model

You should have a alert like the following

Message meets Alert condition date=2020-11-10 time=10:36:45 devname=NYCWHPL devid=FG100ETK1xxxxx eventtime=1605026205167586533 tz="-0600" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=129.213.170.26 locip=xxx.xxx.xxx.2 remport=500 locport=500 outintf="wan2" cookies="f8e26ab551ff16ca/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="failure" init="remote" mode="main" dir="inbound" stage=1 role="responder" result="ERROR"

Hope that helps

Ken Felix

Sign up

Login with SSO

Login to the community

Login with SSO