VPN monitoring

[Timur1]

I am currently using both SSL and remote IPsec VPNs. The issue is the negligible logs on fortigate.

When a user gets disconnected all i see is "status change" in logs, is there anyway to get more info? did the connection drop use to packet loss? user disconnected? etc

if not through Fortigate how are people monitoring this in their infra? is there any setup using 3rd party softwares to be able to monitor why and how VPN was disconnected?

[AEK]

On my FG when a VPN connection is closed FG logs the event "SSL tunnel down".

Can you share double click on the event and share a screenshot of the shown details?

Also in log settings, is "VPN activity events" enabled?