Technical Tip: Email alert notification when IPsec VPN tunnel is down

[aionescu]

Description
This article describes how to use automation stitches to automatically send alert emails if the status of the VPN tunnel changes.

Related document.
https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-system-administration/Monitoring/Ale...

Solution
1) Create a new automation stitch: Go to Security Fabric -> Automation and select 'Create New'.
2) Assign a name, select trigger 'Event Log', and action 'Email'.

Configure the Email options by filling the fields:

- To.
- Email subject.
- Email body.

3) Select the trigger: in this case - IPsec connection status changed.

4) Save the changes.

Flushing the tunnel will trigger the event and send the email alert:

Also, the alert email is received:

5) The following commands can be used for debugging:

# diagnose debug reset
# diagnose debug application alertmail -1
# diagnose debug enable