Hi folks, so we have “VPN IPSec Tunnels” check watching Fortigate IPSec tunnels which checks all tunnels under 1 service and we see a lot of down tunnels and usually it is like we got them for phase2 tunnels and by nature phase2 tunnels can be down naturally and when they needed, like when there is traffic it comes back up… so is there any way to make this service monitor just phase1?
As another solution you could try to set the check to a longer time period beforce it goes in a specific state. Maybe this can help you.
Thank you for the recommendation but that would not be 100% solution, at the moment we are thinking to disable this check and instead use somthing else, maybe custom plugin