How to create "number of concurrent VPN users" report

[Dragan]

Hi

need to create a report that will show how many concurrent users are using PA GlobalProtect VPN per day/week/month.

Appreciate your assistance.

Thanks

[hshah]

Hi Dragon,

All the reports are based on traffic, threat or URL logs. And not System log.

GP user authentication is a part of system log. Hence I am afraid you can not have report.

Closest thing is to export system log with "global protect" settings in spread shit format.

Regards,

Hardik Shah

[Dragan]

If i understand you correctly there is no way to say how many concurrent users i have on PA using VPN? Or haw many concurrent users are logged to PA GlobalProtect Portal?

Is there a way to narrow it down by object groups, apps id, etc that is related to VPN?

Honestly it is hard to believe that there is no statistics as such; other vendor do have it on the first screen when you login to the firewall device, why PA would not have the same?

[hshah]

Hi Dragan,

There are three ways to get the information.

One:

Find concurrent users from GUI

CLI Command:

admin@41-PA-4020> show global-protect-gateway current-user

Two:

From Traffic log > filter logs based on following application.

Three:

Filter system logs based on event for global protect.

Let me know if this helps.

Regards,

Hardik Shah

[hshah]

Hi Dragan,

I found existing feature request, where user requested feature to have "custom report" for system logs and specifically global-protect.

Priority: Medium

FR ID: 3495

You can use above mentioned work around till than. For now contact your SE to vote for this FR.

Regards,

Hardik Shah

[Dragan]

OK thanks

let me work on this..

[panos]

also see this one

https://live.paloaltonetworks.com/message/38397#38397

[hshah · Accepted solution]

Hi Dragan,

Let me know if you need any other help.

Regards,

Hardik Shah