Citrix SD-WAN Center

IPsec tunnel report

IP Security (IPsec) protocols provide security services such as encrypting sensitive data, authentication, protection against replay, and data confidentiality for IP packets.  Encapsulating Security Payload (ESP), and Authentication Header (AH) are the two IPsec security protocols used to provide these security services.

In IPsec tunnel mode, the entire original IP packet is protected by IPsec. The original IP packet is wrapped and encrypted, and a new IP header is added before transmitting the packet through the VPN tunnel.

For more information about configuring IPsec tunnels on Citrix SD-WAN appliances, see IPsec Tunnel Termination.

Citrix SD-WAN Center can show you the state of all the IPsec tunnels configured in your Citrix SD-WAN network.

To view IPsec tunnel statistics:

In Citrix SD-WAN Center, navigate to Reporting > IPsec Tunnels, and in the timeline control select a time period.

You can select and view reports of a particular time frame by using the timeline controls. For more information, see, Timeline controls.

You can also create, save, and open report views. For more information, see, Manage views.

localized image

You can view the following metrics:

  • Name: Application name.
  • Site: Name of the site.
  • Service Type: Type of the service.
  • Intranet Service Type: Type of intranet service associated with the IPsec tunnel. The following are the type of intranet services:
    • Default
    • Microsoft Azure Virtual WAN
    • Zscaler
    • Citrix SaaS Gateway
  • IPsec Worst State: Worst state observed during the selected time period.
  • MTU: Maximum transmission unit—size of the largest IP datagram that can be transferred through a specific link.
  • TX Bandwidth: Bandwidth transmitted.
  • RX Bandwidth: Bandwidth received.
  • TX Packets: Number of packets transmitted.
  • RX Packets: Number of packets received.
  • Data Dropped: Data dropped, in Kbps.
  • Packets Dropped: Number of packets dropped.


Click the settings icon to select the metrics that you want to view.

IPsec tunnel report