Filter:

Submit Search

IMPORTANT
SNS 3.x versions have reached End of Maintenance since July 1st, 2024.
We recommend that you update your SNS firewalls to a version with maintenance to guarantee the protection of your infrastructure.

# IPsec VPN tunnels

This module allows you to view tunnels in active IPsec policies on the firewall (tunnels that have been set up using the native IPsec interface or virtual IPsec interfaces).

#### Possible actions

Refresh | This button allows data displayed in the table to be refreshed.
Configure the IPsec VPN service | This link makes it possible to go directly to the configuration of the IPsec VPN service (Configuration > VPN > IPsec VPN module).

## "Policies" table

The "Policy" table displays the following data:

Filter | The Search field enables data to be filtered according to alphanumeric characters that belong to any column in the table.
Hide established tunnels to display only policies with issues. | This button makes it possible to hide IPsec tunnels that have been correctly set up. Only tunnels that cannot be successfully set up remain displayed.
ID | This system ID allows you to link security policies (SP) to security associations (SA).
Local network | Network of local hosts that communicate through the selected tunnel (traffic endpoint).
Local network name | Name of the object corresponding to the local network
Local gateway | IP address that the local firewall presents to set up the tunnel (tunnel endpoint).
Local gateway name | Name of the object corresponding to the local gateway.
Direction | Direction of network traffic in the tunnel.
Remote gateway | IP address that the remote firewall presents to set up one or several tunnels with the local firewall (tunnel endpoint).
Remote gateway name | Name of the object corresponding to the remote gateway.
Remote network | Network of remote hosts that communicate through the selected tunnel (traffic endpoint).
Remote network name | Name of the object corresponding to the local network
Lifetime | Lifespan of the configured VPN policy.
Status | A green or red LED indicates whether a tunnel has been set up.

#### Right-click menu

Right-clicking on the address or name of a network (local or remote) opens the following pop-up menus:

- Search for this value in the "All logs" view,
- Show host details

Right-clicking on the address or name of a gateway (local or remote) opens the following pop-up menus:

- Search for this value in the "All logs" view.

## "Tunnels" table

The "Tunnels" table displays the following data:

Display only tunnels matching the selected policy | If this checkbox is selected, only tunnels matching the selected policy in the "Policies" table will be displayed.
Local gateway | IP address that the local firewall presents to set up the selected tunnel (tunnel endpoint).
Local gateway name | Name of the object corresponding to the local gateway.
Remote gateway | IP address that the remote firewall presents to set up the selected tunnel (tunnel endpoint).
Remote gateway name | Name of the object corresponding to the remote gateway.
Lifetime | Life span of the SA (Security Association) for the tunnel concerned.
Bytes | Number of bytes exchanged in the selected tunnel.
Status | Indicates the status of the tunnel. (Example: Mature).
Encryption | Name of the encryption algorithm
Authentication | Name of the authentication algorithm