12-20-2016 09:20 AM
I'd like to generate a scheduled report of all the GlobalProtect VPN users connected in the last 24 hours. Is this possible to create in Pan OS 7.1?
12-20-2016 10:09 AM - edited 12-20-2016 10:10 AM
Hi,
Thi sis how to do it manually:
Not sure about scheduled but l guess 99% possible
12-21-2016 07:08 AM
There isn't a way to generate a custom report with system logs; so you would need to likely rig something up with the API generating an output file of what you need and then create a job that pushes that output out via email. Wouldn't be a very elegent solution.
12-21-2016 08:12 AM
I currently have a custom report setup to review this for 7days on my palo alto. I made sure the database drop down was set to traffic summary. Then I simply created a custom report that had a query to include only the source subnet of the VPN users. Sorted by bytes, grouped by rule. I can see how much traffic each user has passed on the VPN specific to each rule allow traffic into the org. I'd imagine something like that could meet your needs as well.
12-21-2016 08:21 AM - edited 12-21-2016 08:23 AM
Thanks, that's what I ended up doing. I created a new custom report for my VPN zone, for Traffic Summary grouped by source user. I also threw in Application just to see what the users were doing, but that can be removed for a regular list
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
