06-19-2020 03:22 PM
Hi,
You can get a detail HIP report dump from the CLI.
This commands will give you all the users connected to the Global Protect Gateway
> show global-protect-gateway current-user
Below you can see the output for a user connected to GP tunnel:
GlobalProtect Gateway: GP-Gateway (1 users)
Tunnel Name : GP-Gateway-N
Domain-User Name : sos\srazaque
Computer : WIN10-REMOTE
Primary Username : sos\srazaque
Region for Config : 10.0.0.0-10.255.255.255
Source Region : 10.0.0.0-10.255.255.255
Client : Microsoft Windows 10 Enterprise Evaluation , 64-bit
VPN Type : Device Level VPN
Mobile ID :
Client OS : Windows
Private IP : 10.20.30.119
Private IPv6 : ::
Public IP (connected) : 10.101.99.22
Public IPv6 : ::
Client IP : 10.101.99.22
ESP : removed
SSL : exist
Login Time : Jun.19 14:44:23
Logout/Expiration : Jul.19 14:44:23
TTL : 2591695
Inactivity TTL : 10757
Request - Login : 2020-06-19 14:44:23.377 (1592603063377), 10.101.99.22
Request - GetConfig : 2020-06-19 14:44:23.696 (1592603063696), 10.101.99.22
Request - SSLVPNCONNECT : 2020-06-19 14:44:30.246 (1592603070246), 10.101.99.22
You can then use the following command below from the CLI and dump the hip report for the user connection. You will need the user, IP and computer name, which can be collected from the command above.
> debug user-id dump hip-report computer WIN10-REMOTE ip 10.20.30.119 user sos\srazaque
Let us know if that helps!
Thanks and stay safe
