Help
FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Shashwati
Staff
Staff

Created on ‎11-23-2023 06:08 PM

Article Id 285861

Technical Tip: How to configure an automation stitch to provide email alerts when IPSec tunnel dead peer detection fails

Description This article explains how to configure an automation stitch to provide email alerts when IPSec tunnel dead peer detection fails.
Scope FortiGate 6.X and 7.X.
Solution
  1. Configure the Automation stitch under Security Fabric -> Automation -> Stitch -> Create New.

 

11-1.PNG

 

  1. Configure an Automation Trigger:

11-2.PNG

 

  1. Under FortiOS Event Log, select 'IPsec DPD failed'.

11-3.PNG

 

  1. Add a trigger.

11-5.PNG

 

  1. Configure the Action to send an email:

11-7.PNG

 

  1. Add the Action to the Automation Stitch:

11-8.PNG

 

The automation stitch has now been configured:

 

11-9.PNG

 

The following logs will trigger an email:

 

date=2023-10-18 time=02:31:10 eventtime=1697610670144517760 tz="-0400" logid="0101037136" type="event" subtype="vpn" level="error" vd="root" logdesc="IPsec DPD failed" msg="IPsec DPD failure" action="dpd" remip=Y.Y.Y.Y locip=X.X.X.X remport=500 locport=500 outintf="ppp2" cookies="0388753fb48e7e90/0227c1f78015a569" user="Y.Y.Y.Y" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="Head Office" status="dpd_failure" advpnsc=0
286
Submit Article Idea
Contributors
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.