How to track current number of SSL VPN users?

kdebreuil — Sun, 27 Jan 2013 00:39:38 GMT

I am looking for a way to report on the number of current SSL VPN users. I would prefer a solution that let's me track this via snmp. I have looked in the MIB for 4.1 and I do not see this anywhere listed in the MIB, I am hoping that someone can point it out to me.

Bonus points, does anyone know if there is a way to have the VPN portal change the gateway settings depending on current user load?

Thanks for any advice,

Kris

Re: How to track current number of SSL VPN users?

mbutt — Mon, 28 Jan 2013 01:13:34 GMT

Hi,

I don't believe currently there is a way to track this through MIBS. But you can for sure look at the currently logged in or previous users in the GUI under

Network---->Global Protect -----> Gateway -----> Click on the more user info and that will display the required information

The above information can also be retrieved from CLI with following commands

admin> show global-protect-gateway previous-user

GlobalProtect Name : internal_gateway (0 users)

Domain User Name Computer Client Private IP Public IP ESP SSL Login Time Logout/Expiration TTL Inactivity TTL

------ --------- --------- ---------- --------- --- --- ---------- ----------------- --- --------------

admin> show global-protect-gateway current-user

GlobalProtect Name : internal_gateway (0 users)

Domain User Name Computer Client Private IP Public IP ESP SSL Login Time Logout/Expiration TTL Inactivity TTL

------ --------- --------- ---------- --------- --- --- ---------- ----------------- --- --------------

admin@LAB-123-PA-500>

For the second question i think you are asking about the licensed version of global protect. If you have the licensed version of the global protect then you can configure multiple gateways and depending on the locality the client connects to different gateways. In other words GP measures latency from each external gateway configured and connects to the one which is has lowest latency.

Also here are some good Tech Notes on Global Protect

https://live.paloaltonetworks.com/docs/DOC-2020

https://live.paloaltonetworks.com/docs/DOC-1666

Hopefully this helps.

Thank you

Numan

topic Re: How to track current number of SSL VPN users? in General Topics

How to track current number of SSL VPN users?

Re: How to track current number of SSL VPN users?