View SASE tunnel status

After configuring Umbrella SASE topology, you need to monitor the tunnel deployment status and verify that the configuration has been successfully pushed to Umbrella.

Procedure

Step 1

Choose Secure Connections > Site-to-Site VPN & SD-WAN.

Step 2

Enter a unique Topology Name, Pre-shared Key, choose a data center, add a device, and click Next.

Step 3

View the summary of the Umbrella SASE Tunnel configuration and click Save.

The Cisco Umbrella Configuration window appears.

You can view the topology details such as name, data center, data center IP address, start, and end time of the tunnel deployment.

You can view the deployment status of the tunnels on Umbrella. The different tunnel deployment statuses are:

  • Pending: The Cloud-Delivered Firewall Management Center hasn't pushed the configuration to Umbrella.

  • Success: The Cloud-Delivered Firewall Management Center successfully configured a tunnel on Umbrella.

  • In Progress: The Cloud-Delivered Firewall Management Center is deploying the tunnel on Umbrella.

  • Failure: The Cloud-Delivered Firewall Management Center couldn't configure a tunnel on Umbrella.

If the status appears as pending, or failure, use the transcript to troubleshoot the tunnel creation. Click the Transcript button to view the transcript details such as the APIs, request payload, and the response received from Umbrella.

Step 4

Click Umbrella Dashboard to view the network tunnels in Cisco Umbrella.

Step 5

View the Umbrella tunnel deployment status in:

  • The Notifications page under the Deployments and Tasks tabs.

  • The Site to Site VPN dashboard (Insights & Reports > VPN dashboards > Site-to-Site VPN).

    The dashboard provides a summary of the site to site VPN topologies including the Umbrella SASE topologies. You can view the tunnels between the peer devices and the status of each tunnel. You can also troubleshoot any problems with the tunnel deployment using CLI commands and packet tracer.