How to track current number of SSL VPN users?

[kdebreuil]

I am looking for a way to report on the number of current SSL VPN users.  I would prefer a solution that let's me track this via snmp.  I have looked in the MIB for 4.1 and I do not see this anywhere listed in the MIB, I am hoping that someone can point it out to me.

Bonus points, does anyone know if there is a way to have the VPN portal change the gateway settings depending on current user load?

Thanks for any advice,

Kris

[mbutt]

Hi,

I don't believe currently there is a way to track this through MIBS. But you can for sure look at the currently logged in or previous users in the GUI under

Network---->Global Protect -----> Gateway -----> Click on the more user info and that will display the required information

The above information can also be retrieved from CLI with following commands

admin> show global-protect-gateway previous-user

         GlobalProtect Name : internal_gateway (0 users)

         Domain User Name       Computer        Client          Private IP      Public IP       ESP     SSL     Login Time      Logout/Expiration TTL       Inactivity TTL

         ------ ---------       ---------       ----------      ---------       ---     ---     ----------      ----------------- ---       --------------

admin> show global-protect-gateway current-user

         GlobalProtect Name : internal_gateway (0 users)

         Domain User Name       Computer        Client          Private IP      Public IP       ESP     SSL     Login Time      Logout/Expiration TTL       Inactivity TTL

         ------ ---------       ---------       ----------      ---------       ---     ---     ----------      ----------------- ---       --------------

admin@LAB-123-PA-500>

For the second question i think you are asking about the licensed version of global protect. If you have the licensed version of the global protect then you can configure multiple gateways and depending on the locality the client connects to different gateways. In other words GP measures latency from each external gateway configured and connects to the one which is has lowest latency.

Also here are some good Tech Notes on Global Protect

https://live.paloaltonetworks.com/docs/DOC-2020

https://live.paloaltonetworks.com/docs/DOC-1666

Hopefully this helps.

Thank you

Numan