02-14-2018 12:26 PM
Greetings,
So, I have a ticket open with support requesting on detailed reporting as seen on Network --> Global Protect --> Gateways --> Remote user link --> remote user tab, but on a cumulative basis instead of just data from the last login session.
I searched around and found two links:
The first link allowed me to export the data to a csv format, but lack the details as provided by the "remote user" link, especially the logout time. These links dated back to 2013/2014 respectively, and I have not seen any progress from PAN on providing a proper detailed reporting.
Does anyone out there have a solution, so I can make a query on when a user logged in, logged out, the frequency of that particular using GP, session utilization, etc? I am assuming one could remote syslog the data and use splunk to generate the proper report. However, I hope someone has an easier method to obtain the required reporting...
Thank you.
02-15-2018 01:21 AM
not much help but for frequency I do use syslog.
all 36 of our gateways log to the same syslog server so this saves me having to remote to each PA for logon stats.
i run my own reports using grep & sed, these are then csv'd and passed to various departments for audit/charging...
It has always been a gripe of mine that this information is not collected by panorama......
I did try to run custom reports on GP allocated addresses and zones but got a bit messy, perhaps if i understood the reporting side better I may have succeeded but this will then only assume user logon time, not actually display it...
looking forward to a solution here.....
02-15-2018 08:38 AM
Looks like there is a submitted feature request (ID 533), but nobody can tell me if PAN is even showing interest in making it available in the next release. I'm trying to be that squeeky wheel to push them over the edge to do so...
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
