Configure Secure Access Site-To-Site VPN Monitoring for High Availability

Available Languages

Download Options

  • PDF     (7.0 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (83.2 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (68.4 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:December 13, 2023
Document ID:221233

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes what to use for fail-over monitoring on site-to-site VPN for Secure Access.

    Problem

    The lack of effective monitoring can lead to significant operational disruptions. A gap in network monitoring can hinder an organizations interoperability and can result in the loss of the image of an organization or financial loss that can impact the business continuity of an organization.

    Also, the absence of failover mechanisms results in these issues without an automated response to redirect traffic when a VPN tunnel fails, either due to the failure of the provider or other causes related to internet traffic.

    Solution

    To address this issue, you can monitor an IP or domain that can help you identify a failure on the network when a VPN is established to Secure Access to know when you are having connection issues from one of the tunnels.

    You can use this domain or IP to monitor the communication to Secure Access:

    • service.sig.umbrella.com port 80
    • 146.112.255.40 port 80

    For more information, please check Monitor Network Tunnel Status

    note-icon

    Note: This domain and IP respond only to the devices behind Secure Access. ICMP is not supported.

    Related Information

    Revision History

    Revision Publish Date Comments
    1.0
    14-Dec-2023
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    • Jairo Moreno
      TAC

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products