How VPN agent works

When a query is submitted, the VPN agent correlates operational data across routing protocols, tunnel negotiation states, traffic flow behavior, and policy enforcement to identify the most likely root cause and provide actionable insights. Depending on the issue being investigated, the VPN agent can:

  • Identify affected site-to-site VPN tunnels.

  • Analyze IKE Phase 1 and Phase 2 negotiation states.

  • Review tunnel establishment and peer connectivity status.

  • Investigate routing behavior across the VPN tunnel.

  • Evaluate traffic flow behavior between local and remote networks.

  • Correlate logs, telemetry, and operational events to identify likely root causes.

  • Generate operational findings, root-cause analysis, and remediation recommendations.

Procedure


Step 1

In the left pane, click Insights & Reports > Agent Workforce > Conversations.

Step 2

Click New Conversation.

Step 3

Enter a query describing the VPN connectivity issue or traffic-flow problem.

Agent Workforce automatically assigns the request to the VPN agent based on the operational intent.

Step 4

Review the generated diagnostics, tunnel analysis, routing behavior, traffic flow analysis, and remediation recommendations.

Step 5

Continue refining the investigation by providing additional operational details such as affected sites, peer devices, tunnel names, or observed behavior.

Step 6

Review the recommended remediation actions and validate the operational impact before applying configuration changes.


After the analysis is completed, the VPN agent summarizes operational findings, identified root cause, impact assessment, additional observations, recommended remediation steps and next actions.