IPSec VPN tunnels
This module allows you to view tunnels in active IPSec policies on the firewall (tunnels that have been set up using the native IPSec interface or virtual IPSec interfaces).
Possible actions
Refresh | This button allows data displayed in the table to be refreshed. |
Configure the IPsec VPN service | This link makes it possible to go directly to the configuration of the IPSec VPN service (Configuration > VPN > IPSec VPN module). |
"Policies" table
The "Policy" table displays the following data:
Filter | The Search field enables data to be filtered according to alphanumeric characters that belong to any column in the table. |
Hide established tunnels to display only policies with issues. | This button makes it possible to hide IPSec tunnels that have been correctly set up. Only tunnels that cannot be successfully set up remain displayed. |
ID | This system ID allows you to link security policies (SP) to security associations (SA). |
Local network | Network of local hosts that communicate through the selected tunnel (traffic endpoint). |
Local network name | Name of the object corresponding to the local network |
Local gateway | IP address that the local firewall presents to set up the tunnel (tunnel endpoint). |
Local gateway name | Name of the object corresponding to the local gateway. |
Direction | Direction of network traffic in the tunnel. |
Remote gateway | IP address that the remote firewall presents to set up one or several tunnels with the local firewall (tunnel endpoint). |
Remote gateway name | Name of the object corresponding to the remote gateway. |
Remote network | Network of remote hosts that communicate through the selected tunnel (traffic endpoint). |
Remote network name | Name of the object corresponding to the local network |
Lifetime | Lifespan of the configured VPN policy. |
Status | A green or red LED indicates whether a tunnel has been set up. |
Right-click menu
Right-clicking on the address or name of a network (local or remote) opens the following pop-up menus:
- Search for this value in the "All logs" view,
- Show host details
Right-clicking on the address or name of a gateway (local or remote) opens the following pop-up menus:
- Search for this value in the "All logs" view.
"Tunnels" table
The "Tunnels" table displays the following data:
Display only tunnels matching the selected policy | If this checkbox is selected, only tunnels matching the selected policy in the "Policies" table will be displayed. |
Local gateway | IP address that the local firewall presents to set up the selected tunnel (tunnel endpoint). |
Local gateway name | Name of the object corresponding to the local gateway. |
Remote gateway | IP address that the remote firewall presents to set up the selected tunnel (tunnel endpoint). |
Remote gateway name | Name of the object corresponding to the remote gateway. |
Lifetime | Life span of the SA (Security Association) for the tunnel concerned. |
Bytes | Number of bytes exchanged in the selected tunnel. |
Status | Indicates the status of the tunnel. (Example: Mature). |
Encryption | Name of the encryption algorithm |
Authentication | Name of the authentication algorithm |