With IPHost Network Monitor you can run simple snmp requests against a Cisco device in your network.
cipsStaticCryptomapPfs
Cisco IPsec Static Cryptomap Pfs
1.3.6.1.4.1.9.9.431.1.4.3.1.11
This object identifies if the tunnels instantiated due to this policy item should use Perfect Forward Secrecy (PFS) and if so, what group of Oakley they should use.
Back to CISCO-IPSEC-MIB MIB page.
IPHost Network monitor allows you to monitor cipsStaticCryptomapPfs on Cisco device via the SNMP protocol. Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring Cisco switches right now.
