topic VPN Total Connections Report in GlobalProtect Discussions

VPN Total Connections Report

thoffman — Mon, 10 Oct 2022 18:31:50 GMT

Hello,

I am trying to figure out how to get a report that would show the total connections that were made VIA Global Connect.

I can see this when I go look at the Gateway as it shows how many people are connected there.

Is there a way to get a report for the last 30 days stating this number? This is on a PA-3200 PAN-OS 10.x.x

Thank you,
Tom

Re: VPN Total Connections Report

BPry — Mon, 10 Oct 2022 18:45:32 GMT

@thoffman,

There's not a way to really get this information directly on the firewall in a format that makes a lot of sense. What you'll find is that a lot of users connect multiple times a day, and the firewall's built-in custom reports are too limited to really make that report all that usable.

What I would personally recommend doing is either shipping GlobalProtect logs to a SIEM that can better build this report, or simply using the API coupled with a database to do the same thing if you have scripting knowledge. The API call is what I personally find easiest to do since you can just get the total user count broken up by gateway along with the total user count and right it to a database or any other form of record including something as simple as a CSV file.

Re: VPN Total Connections Report

thoffman — Mon, 17 Oct 2022 12:45:48 GMT

@BPry,

Logs are sent to a SIEM so that is what we are going to do.

Thank you.