MIBS for SSL VPN

[nconquest]

Does Palo Alto have any documentation on MIBS for SSL. If so could someone point me in the right direction.

[kadak]

Hello Nathaniel Conquest,

I don't believe currently there is a way to track this through MIBS. But you can for sure look at the currently logged in or previous users in the GUI and CLI

In WebUI:

Network>Global Protect> Gateway > Click on the more user info and that will display the required information

In CLI,

> show global-protect-gateway previous-user

          GlobalProtect Name : internal_gateway (0 users)

         Domain User Name       Computer        Client          Private IP      Public IP       ESP     SSL     Login Time      Logout/Expiration TTL       Inactivity TTL

> show global-protect-gateway current-user

         GlobalProtect Name : internal_gateway (0 users)

         Domain User Name       Computer        Client          Private IP      Public IP       ESP     SSL     Login Time      Logout/Expiration TTL       Inactivity TTL

However, we do have feature requests (FR ID : 1054 and FR ID : 1095 ) submitted to our development team to be added in our future releases. You can request your account' SE to vote for it.

Currently supported MIBs and OIDs for your reference:

PAN-OS 5.0 Enterprise MIBs

Supported MIBs

Hope that helps!

Thanks and regards,

Kunal Adak

[nconquest]

Okay thanks for the information. The client was looking to see if PA need have MIBS for there external monitoring system their using versus having to psychically log into the device to see if the tunnels down.