- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-26-2013 04:39 PM
I am looking for a way to report on the number of current SSL VPN users. I would prefer a solution that let's me track this via snmp. I have looked in the MIB for 4.1 and I do not see this anywhere listed in the MIB, I am hoping that someone can point it out to me.
Bonus points, does anyone know if there is a way to have the VPN portal change the gateway settings depending on current user load?
Thanks for any advice,
Kris
01-27-2013 05:13 PM
Hi,
I don't believe currently there is a way to track this through MIBS. But you can for sure look at the currently logged in or previous users in the GUI under
Network---->Global Protect -----> Gateway -----> Click on the more user info and that will display the required information
The above information can also be retrieved from CLI with following commands
admin> show global-protect-gateway previous-user
GlobalProtect Name : internal_gateway (0 users)
Domain User Name Computer Client Private IP Public IP ESP SSL Login Time Logout/Expiration TTL Inactivity TTL
------ --------- --------- ---------- --------- --- --- ---------- ----------------- --- --------------
admin> show global-protect-gateway current-user
GlobalProtect Name : internal_gateway (0 users)
Domain User Name Computer Client Private IP Public IP ESP SSL Login Time Logout/Expiration TTL Inactivity TTL
------ --------- --------- ---------- --------- --- --- ---------- ----------------- --- --------------
admin@LAB-123-PA-500>
For the second question i think you are asking about the licensed version of global protect. If you have the licensed version of the global protect then you can configure multiple gateways and depending on the locality the client connects to different gateways. In other words GP measures latency from each external gateway configured and connects to the one which is has lowest latency.
Also here are some good Tech Notes on Global Protect
https://live.paloaltonetworks.com/docs/DOC-2020
https://live.paloaltonetworks.com/docs/DOC-1666
Hopefully this helps.
Thank you
Numan
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!