topic Re: User-ID Statistics in General Topics

User-ID Statistics

mmcastr — Thu, 22 Nov 2018 17:57:38 GMT

We have a cenario where the Firewall control the Internet access from users in the local network and we control these access with URL profiles and security policies.
We identify the user session with USER-ID Agent installed on Windows AD Servers.
I'd like to count how many users the Firewall identify per day in the Internet Access.

How can I get these kind of statistic?
Is there a way to extract this data from the PA?

Regards,
Marcelo Castro

Re: User-ID Statistics

Remo — Thu, 22 Nov 2018 20:13:15 GMT

@mmcastr wrote:
Is there a way to extract this data from the PA?

Yes, over the API, but you probably need to write a little script (or do it manually, but I would not recommend that) that pulls every hour or so the IP-User mappings from the firewall and creates a list with only the unique usernames.

Or with a custom report where you only add sourceuser and maybe sessions to the shown columns. This will generate a report that show the sessions per user.

Re: User-ID Statistics

Mick_Ball — Fri, 23 Nov 2018 13:13:42 GMT

Edited...

if you are forwarding logs to syslog then...

if not, then API as per @Remo.

Re: User-ID Statistics

mmcastr — Tue, 27 Nov 2018 11:19:24 GMT

I did something like you suggested to get the data from logs.

Thanks for the tip.