DX NetOps

I have created different watches in spectrum on my firewall device in order to monitor different VPN tunnels down status behind my firewall. However when my firewall goes down I was able to get the evens for these watches but I am not sure why they are throwing the error which results in not giving the alarms on the console.

Also I have attached the screenshot for the events tab of the device. Request if someone can please help me out on this.

Aman,

You stated above "when my firewall goes down", are you saying when the torfwp006a firewall device goes down, you are seeing the "The evaluation of watch Watch_1 failed for model torfwp006a: Unable to read attribute tunnelState"?

Joe

Yes sir when my firewall torfwp006a goes down my tunnel will also go down which are behind that firewall and I have created the watches to monitor those tunnels. So yes when my firewall goes down I receive "The evaluation of watch Watch_1 failed for model torfwp006a" as per the events noticed on the firewall.

If the torfwp006a firewall device goes down, the watch will fail because Spectrum cannot read the table on the device to get the information it needs to evaluate the watch.

Joe

Hello Aman

We discussed on the phone that you have some scenarios where the Checkpoint Firewall is UP and you're still seeing events "unable to read tunnelState" attribute. When this occurs, please check MIB tools to see if the tunnelState instance that is being monitored by the Watch is still an active instance within the tunnlState table. 

I will open a case for you and send you an email on this topic. 

Thank you,

~Jay V