Blue Matador automatically monitors the TunnelEgressPacketDropTSMismatch and TunnelIngressPacketDropTSMismatch metrics to detect when packets on your Azure VPN connections are dropped due to traffic selector mismatch. Traffic selector mismatch occurs when the local and remote addresses for traffic in the VPN tunnel does not match the traffic selectors configured on either end of the VPN.
Traffic selector mismatch is caused by configuration on either end of the VPN tunnel. Azure VPN Gateways support specific IPsec and IKE configurations that must match with the device on the other end of the tunnel. Consult the following guides to troubleshoot depending on your specific setup:
