Can SCOM 2012 be used for VPN Tunnel monitoring? if so what is the correct way of implementing this? what prerequisite steps need to be followed?

It depends on how your VPN is works. You can use a simple monitoring, like pinging some device on the 'other side' of a tunnel, if this tunnel is maintained by a VPN device (Cisco or something like that) you can use SNMP to query a tunnel status.
You can use a script-based monitor that will ping some host on the other side of VPN. Should be something like this (pseudo-code):

$time = Get-CurrentTime
$LastSuccess = Get-RegistryKeyForTimestamp HKLM\bla-bla\RegKey
$Delta = $time - $LastSuccess  #time since last success probe
$Status = Ping-Host "ServerX"
if ($Status = "Failed" AND $Delta > 1 hour) {
 $Return = "Failed more than hour"
}
if ($Status = "Success") OR ($Status = "Failed" AND $Delta =< 1 hour)
{
Set-RegistryKeyTimestamp HKLM\bla-bla\RegKey
 $Return = "Healthy"
}

for detail, pls. refer to
https://social.technet.microsoft.com/forums/systemcenter/en-US/31cd1517-fa21-424e-8ef5-dac571107922/vpn-tunnel-monitoring

Moreover, if you are using RemoteAccess 2012 to be VPN tunnel, you may consider download and install System Center 2012 Management Pack for RemoteAccess 2012 from
http://www.microsoft.com/en-us/download/details.aspx?id=36496&WT.mc_id=rss_alldownloads_all
roger

• Edited by System Center guyMicrosoft community contributor 6 minutes ago

It depends on how your VPN is works. You can use a simple monitoring, like pinging some device on the 'other side' of a tunnel, if this tunnel is maintained by a VPN device (Cisco or something like that) you can use SNMP to query a tunnel status.
You can use a script-based monitor that will ping some host on the other side of VPN. Should be something like this (pseudo-code):

$time = Get-CurrentTime
$LastSuccess = Get-RegistryKeyForTimestamp HKLM\bla-bla\RegKey
$Delta = $time - $LastSuccess  #time since last success probe
$Status = Ping-Host "ServerX"
if ($Status = "Failed" AND $Delta > 1 hour) {
 $Return = "Failed more than hour"
}
if ($Status = "Success") OR ($Status = "Failed" AND $Delta =< 1 hour)
{
Set-RegistryKeyTimestamp HKLM\bla-bla\RegKey
 $Return = "Healthy"
}

for detail, pls. refer to
https://social.technet.microsoft.com/forums/systemcenter/en-US/31cd1517-fa21-424e-8ef5-dac571107922/vpn-tunnel-monitoring

Moreover, if you are using RemoteAccess 2012 to be VPN tunnel, you may consider download and install System Center 2012 Management Pack for RemoteAccess 2012 from
http://www.microsoft.com/en-us/download/details.aspx?id=36496&WT.mc_id=rss_alldownloads_all
roger

• Edited by System Center guyMicrosoft community contributor Wednesday, September 09, 2015 7:03 AM

It depends on how your VPN is works. You can use a simple monitoring, like pinging some device on the 'other side' of a tunnel, if this tunnel is maintained by a VPN device (Cisco or something like that) you can use SNMP to query a tunnel status.
You can use a script-based monitor that will ping some host on the other side of VPN. Should be something like this (pseudo-code):

$time = Get-CurrentTime
$LastSuccess = Get-RegistryKeyForTimestamp HKLM\bla-bla\RegKey
$Delta = $time - $LastSuccess  #time since last success probe
$Status = Ping-Host "ServerX"
if ($Status = "Failed" AND $Delta > 1 hour) {
 $Return = "Failed more than hour"
}
if ($Status = "Success") OR ($Status = "Failed" AND $Delta =< 1 hour)
{
Set-RegistryKeyTimestamp HKLM\bla-bla\RegKey
 $Return = "Healthy"
}

for detail, pls. refer to
https://social.technet.microsoft.com/forums/systemcenter/en-US/31cd1517-fa21-424e-8ef5-dac571107922/vpn-tunnel-monitoring

Moreover, if you are using RemoteAccess 2012 to be VPN tunnel, you may consider download and install System Center 2012 Management Pack for RemoteAccess 2012 from
http://www.microsoft.com/en-us/download/details.aspx?id=36496&WT.mc_id=rss_alldownloads_all
roger

• Edited by System Center guyMicrosoft community contributor Wednesday, September 09, 2015 7:03 AM

It depends on how your VPN is works. You can use a simple monitoring, like pinging some device on the 'other side' of a tunnel, if this tunnel is maintained by a VPN device (Cisco or something like that) you can use SNMP to query a tunnel status.
You can use a script-based monitor that will ping some host on the other side of VPN. Should be something like this (pseudo-code):

$time = Get-CurrentTime
$LastSuccess = Get-RegistryKeyForTimestamp HKLM\bla-bla\RegKey
$Delta = $time - $LastSuccess  #time since last success probe
$Status = Ping-Host "ServerX"
if ($Status = "Failed" AND $Delta > 1 hour) {
 $Return = "Failed more than hour"
}
if ($Status = "Success") OR ($Status = "Failed" AND $Delta =< 1 hour)
{
Set-RegistryKeyTimestamp HKLM\bla-bla\RegKey
 $Return = "Healthy"
}

for detail, pls. refer to
https://social.technet.microsoft.com/forums/systemcenter/en-US/31cd1517-fa21-424e-8ef5-dac571107922/vpn-tunnel-monitoring

Moreover, if you are using RemoteAccess 2012 to be VPN tunnel, you may consider download and install System Center 2012 Management Pack for RemoteAccess 2012 from
http://www.microsoft.com/en-us/download/details.aspx?id=36496&WT.mc_id=rss_alldownloads_all
roger

• Edited by System Center guyMicrosoft community contributor Wednesday, September 09, 2015 7:03 AM