How to view logs of "pre-share key" authentication issues in Cloud Managed Prisma Access

How to view logs of "pre-share key" authentication issues in Cloud Managed Prisma Access

1352
Created On 11/29/22 08:37 AM - Last Modified 02/16/24 02:38 AM


Objective


To view logs related to "pre-share keys" for VPN on Cloud Managed Prisma Access.



Environment


  • Cloud Managed Prisma Access
  • IPSEC vpn
  • Pre-shared keys


Procedure


The following filter can be used in Cloud Managed Prisma Access console to view these logs:
  1. Login to Prisma access
  2. Navigate to Activity > Log Viewer > Common/System
  3. Filter by : sub_type.value = 'vpn' AND event_name.value = 'ikev2-nego-fail-psk'
  4. The logs matching the filter are displayed.
image.png
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZzlCAE&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail