06-07-2021 02:59 PM
Dear, we are doing a large and hard troubleshooting to forensic analysis into our company, so we need know more information about the "GlobalProtect Stages and Events columns Logs Monitor".
Example: what it means the stages: before-login, tunnel, host-info, login and configuration. What it means the events: gateway-tunnel-latency, gateway-logout, portal-prelogin, portal-getconfig, portal-auth and gateway-auth.
PS: we have not found anything about this into Palo Alto's official doc.
Thanks a lot for help us.
06-08-2021 09:36 AM
Please take a look at this part of the GlobalProtect Admin guide and let me know if this helps at all..
06-08-2021 05:00 PM
Dear @jdelio . I appreciate your help. But it's still not what we're looking for. We need to thoroughly understand each of the GlobalProtect stages and events.
05-18-2022 01:29 PM
This looks like what you are looking for:
https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/logging-for-globalprotect-i...
Example:
gateway-tunnel-latency | Indicates GlobalProtect gateway latency provided by a GlobalProtect client. Refer to description for latency reported information, such as Pre-tunnel latency: 10ms or Post-tunnel latency: 1ms |
gateway-logout | Indicates a GlobalProtect gateway event for a GlobalProtect client logout. |
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!