Remote staff at a SaaS company lose their VPN while probes inside the office stay green for the same applications. Which rule matches those failures?
Select an answer to reveal the explanation.
Short Explanation
The office lights can be on while your remote tunnel is the thing that dropped. You write an endpoint VPN rule for the clients that lose the tunnel, because the office probes stay green. BGP on those office routers, a core SNMP alarm, or a weekly summary that skips the remote client pages the wrong team.
Full Explanation
Office probes that stay green show the applications are reachable from inside the office. The failures are remote clients losing the VPN, so the rule that matches is an endpoint VPN rule on those clients. It watches the tunnel the staff actually lost. A BGP-state alert on office routers that the green office probes do not fault watches routing sessions the office evidence has not blamed, and an office routing change is not what the remote tunnel drop is showing. An SNMP interface alarm on a core router the green office probes still show as healthy pages on a core interface those probes are not indicting. A weekly executive summary that never watches the remote VPN client can brief leadership and still never evaluates the client tunnel. Exam caveat: green internal probes do not cover a remote access tunnel that starts on the endpoint. Operational check: compare VPN disconnect times on the remote clients with the office probe results and bind the alert to the client VPN state on those laptops.