How to monitor PIX VPN connection

[sslokey]

If SNMP is setup will the PIX send a trap or make a syslog entry if a VPN tunnel dies? Is there an SNMP value I can poll? What is the normal method to monitor the health of a VPN connection on a PIX?

Thanks,

Scott

[didyap]

Here is the page that explain how to configure SNMP on a PIX firewall.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_system_message_guide_chapter09186a00800896ac.html#xtocid5

And here is the page which says which message belongs to which security level.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_system_message_guide_chapter09186a00800896d5.html#25608

ANd this document talks about using SNMP with PIX firewall.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a13.shtml

And I am sure this document will help you.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094469.shtml

[sslokey]

Thanks but the question isn't HOW to configure SNMP but really when SNMP is configured, will the PIX give any indication that a VPN connection is lost. It looks like the consensus is, that other than pinging something on the other side, there is no way to know. I have heard that VPN/Security Management Solution 2.2 may have some ability to do this but the overwhelming response from people using VMS is to stay away from it.