Best way to monitor VPN tunnel status

I’m doing failover for VPN - client with a few service providers, however, in the past there were instances where system would show status “connected” but the service would actually be down. Whats the best way to monitor if the tunnel is up?

One idea I’m having is to ping public host through VPN interface, thus tried using NetWatch but it doesnt seem to do the job.

Any ideas or past experience approaches?

You can ping specific interfaces in the command line.

But to use netwatch… you need to have a route.

Maybe if you provided more info.