Hot!How to know ISP drops

Author
DamianLozano
Bronze Member
  • Total Posts : 55
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/01/28 11:28:32
  • Status: offline
2020/08/11 07:31:55 (permalink)
0

How to know ISP drops

Hello,
 
Is there a way to know when any Internet connecion stopped working with the default settings?
Can I do anything to know this?
I have FortiOS 6.2.2 in this Fortigate 60E, there is one SD-WAN with 1 performance sla for each wan, I can see if the wan is up or down in real time but I dont know how to check the history
 
Regards,
Damián
 
#1

6 Replies Related Threads

    SecurityPlus
    Gold Member
    • Total Posts : 384
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/08/11 18:41:34
    • Status: online
    Re: How to know ISP drops 2020/08/22 21:51:37 (permalink)
    0
    Good question. In addition to keeping history of the ISP outage, I would like to know how to receive a notification when this happens. Does anyone know how this can be accomplished?

    FWF30E, FG40F, FG50E, FWF50E, FG60D, FWF60D, FG60E, FG60F, FG80E, FG100D
    FortiOS 5.2, 5.4, 5.6, 6.0, 6.2, and 6.4
    FortiSwitch FS-224E-POE, FS-124E-POE
    FAP-221E, FAP-224E, FAP-221C
    #2
    Fullmoon
    Platinum Member
    • Total Posts : 944
    • Scores: 16
    • Reward points: 0
    • Joined: 2010/08/02 18:02:10
    • Status: offline
    Re: How to know ISP drops 2020/08/23 06:57:54 (permalink)
    0
    this might require FAZ under event trigger.

    Fortigate Newbie
    #3
    SecurityPlus
    Gold Member
    • Total Posts : 384
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/08/11 18:41:34
    • Status: online
    Re: How to know ISP drops 2020/08/23 11:22:35 (permalink)
    0
    In FortiCloud, FortiGate Cloud GLOBAL, there is an option under Analysis / Event Management, to turn of a notification for Interface Down. Would this notify if the ISP was down?

    FWF30E, FG40F, FG50E, FWF50E, FG60D, FWF60D, FG60E, FG60F, FG80E, FG100D
    FortiOS 5.2, 5.4, 5.6, 6.0, 6.2, and 6.4
    FortiSwitch FS-224E-POE, FS-124E-POE
    FAP-221E, FAP-224E, FAP-221C
    #4
    brycemd
    Silver Member
    • Total Posts : 117
    • Scores: 6
    • Reward points: 0
    • Joined: 2016/12/03 11:24:30
    • Status: offline
    Re: How to know ISP drops 2020/08/23 14:42:03 (permalink)
    0
    The problem with interface down is there is rarely a situation where that happens. Normally the interface is up, indication just a physical connection, but the traffic doesn't get out. Interface down doesn't help in that scenario.
     
    If you setup a link monitor you could accomplish this. If you are already using SDWAN you should have determined a link monitor anyways, in which case you simply need to create an Automation Stitch.. if you aren't using SDWAN already you can manually create a link monitor.
     
    config system link-monitor
    edit 1
    set srcintf wan1
    set server 8.8.8.8 1.1.1.1  -- or whatever it is you want to use to determine an outage
    set update-static-route disable  -- disable if you only have 1 WAN, enable is used to failover to secondary
    end
     
    This will allow you to generate a log entry when the targets defined in the server part are unreachable. You can then create an automation stitch(under Security Fabric > Automation) to email you when this event is triggered. Though, obviously you would only get the email after the fact if you don't have a secondary line.
    post edited by brycemd - 2020/08/23 14:51:03
    #5
    DamianLozano
    Bronze Member
    • Total Posts : 55
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/01/28 11:28:32
    • Status: offline
    Re: How to know ISP drops 2020/08/25 07:37:32 (permalink)
    0
    Thanks brycemd for your answer this seems useful, I need more time to test this
    Regards,
    Damián
    #6
    neisany
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/10/23 11:09:41
    • Status: offline
    Re: How to know ISP drops 2020/10/23 11:57:06 (permalink)
    0
    Brycemd,
     
    Do you know which event we need to monitor?
     
    I am showing 3 possibilities
     
    interface link status change <-- i dont think this one applies as we are not shutting down the interface
     
    link monitor sla information
     
    and link monitor status.  <-- I assume this is the entry that I am monitoring.
    #7
    Jump to:
    © 2020 APG vNext Commercial Version 5.5