Cisco Secure Access Alerts for Tunnel Connectivity, Overview

Alerts for Tunnel Connectivity

Cisco Secure Access Alert Rules manage the configuration and administration of alerts for specific types of conditions on the organization's resources. You can configure an alert rule with an alert category and conditions, and a list of email recipients and a Webhook target.

Overview

The Secure Access Tunnel Connectivity alert rule monitors the state of the network tunnel groups deployed in the Secure Access organization.

Secure Access monitors:

• A Network Tunnel Group is disconnected
• A Hub is down in a Network Tunnel Group

Secure Access sends notifications formatted in JSON using the Secure Access Alert schema for Tunnel Connectivity. For more information, see Event Format: Tunnel Connectivity Alerts.

Get Started

To get started, add an Alert Rule in Secure Access and choose the methods for sending the notifications: email and Webhook. You can add your Alert Rules using the Secure Access user interface (UI) or Cisco Secure Access Alerting API. For more information, see Alerting API.

Set Up Alerts

1. Deploy an HTTP listener in your on-premises or cloud environment. The target system must support Basic authentication with a username and password and accept HTTP POST messages.
2. Add a Webhook in Secure Access as a Third-party integration. Configure the Webhook with the URL and Basic authentication credentials of the HTTP listener. For more information, see Third-Party Integrations API.
3. Validate that your target system receives the Secure Access alerts.

Sample JSON Alert Message: Tunnel Connectivity

{
    "dataContentType": "application/json",
    "id": "b6dcfa1c-902b-537a-bc56-e803ed834f41",
    "integrationids": "webhook.v1:14af766b-3fe7-4b9e-be74-29c4801ec2df",
    "orgid": "1234567",
    "source": "secureaccess.alerts",
    "specVersion": "1.0",
    "time": "2026-01-30T10:00:14Z",
    "type": "secureaccess.alerts.connectivity.tunnels.v1",
    "data": {
      "alerts": [
        {
          "alertId": "AL-353-8262543-1769767213972-083277a483cd8b97",
          "alertType": "Network tunnel group disconnected",
          "category": "Connectivity",
          "conditionsApplied": {
            "conditions": [
              "Region: us-stage-1.1"
            ],
            "require": "all"
          },
          "ruleId": 353,
          "ruleName": "Webhook Schema 3",
          "severity": "low",
          "status": "active",
          "time": "2026-01-30T10:00:13.972880206Z"
        }
      ]
    }
}

JSON Schema: Tunnel Connectivity Alert

You can download the Cisco Secure Access Tunnel Connectivity Alert schema at Cisco Secure Access Tunnel Connectivity Alerts Schema.