topic Re: One-liner for Remote Access VPN Statistics in Scripts

Remote Access VPN Statistics - One-liner

Danny — Tue, 10 Feb 2026 23:05:47 GMT

👩‍💻 Reviewed by RnD.
👍 Available as SmartConsole Extension.

One-liner (Bash) to show a summary about the remote access statistics of a VPN gateway.
Run in SmartConsole as one-time script or from your scripts repository or directly on your Gateway in expert mode:

echo; if [[ `if [[ $(cat /etc/cp-release) == *"Embed"* ]]; then grep 1 /opt/fw1/conf/active_blades.txt | tr '[:upper:]' '[:lower:]'; else enabled_blades 2>/dev/null; fi` != *'vpn'* ]]; then echo ' Not a VPN gateway!'; else echo ' REMOTE ACCESS VPN STATS - Current'; printf '%.s-' {1..70}; echo; function f { if [[ "$TERM" == "xterm" ]]; then fw tab -t $1 -s | tail -n1 | awk '{print "\033[0;32m"$4"\033[0m (Peak: "$5")"}'; else fw tab -t $1 -s | tail -n1 | awk '{print $4" (Peak: "$5")"}'; fi; }; function t { [ "$TERM" == "xterm" ] && tput bold; }; t; echo -n " Assigned OfficeMode IPs : "; f "om_assigned_ips"; t; echo -n " Capsule/Endpoint VPN Users : "; echo `f "userc_users"` using Visitor Mode: `vpn show_tcpt 2>/dev/null | grep 'Visitor' | tail -n1 | awk '{print $NF}' | sed 's/Mode:/0/'`; t; echo -n " Capsule Workspace Users : "; f "mob_mail_session"; if [[ `cat /etc/cp-release` != *"Embed"* ]]; then t; echo -n " MAB Portal Users : "; f "cvpn_session"; fi; t; echo -n " L2TP Users : "; f "L2TP_tunnels"; t; echo -n " SNX Users : "; f "sslt_om_ip_params"; echo; echo ' LICENSES'; printf '%.s-' {1..70}; t; echo; function s { awk '{ sum += $1 } END { print sum }'; }; function u { echo Unlimited; }; l=`cplic print -p 2>/dev/null | awk --re-interval 'BEGIN{today="date +%s"; today | getline today; } $1 ~ /([1-9][0-9]*\.?){4}/ {if ($2 != "never") {expdate=$2; cmd="date -d " expdate " +%s"; cmd | getline expdate; if (expdate>today) {print} } else {print}}' | tr ' ' '\n'`; echo -n ' SecuRemote Users : '; if [[ "$l" == *'srunlimited'* ]]; then u; else echo "$l" | grep fw1:6.0:sr | cut -c 11- | s; fi; echo -n ' Endpoint Connect Users : '; grep -a sc_users $FWDIR/database/fwauth.NDB | tr -dc '[:digit:]\n' | awk '{print $1/5}' | echo $(cat); echo -n ' Mobile Access Users : '; if [[ "$l" == *'cvpnunlimited'* ]]; then u; else echo "$l" | grep cvpn:6.0:cvpn | cut -c 14- | tr -d 'user' | s; fi; echo -n ' SNX Users : '; if [[ "$l" == *'nxunlimit'* ]]; then u; else echo "$l" | grep fw1:6.0:nx | cut -c 11- | s; fi; [ "$TERM" == "xterm" ] && tput sgr0; unset l; fi; echo

This One-liner is also integrated with our ccc script.

Thanks to @PhoneBoy for license macro information in this thread. [ VPN License Guide ]
Thanks to @HristoGrigorov for SMB support and testing.
Thanks to CheckMates for these Remote Access SmartEvent Reports: Basic, Enhanced, Application Monitoring, Custom User Stats

Re: One-liner for Remote Access VPN Statistics

Wolfgang — Mon, 23 Mar 2020 07:23:26 GMT

@Danny

great job. I love these oneliners.

Wolfgang

Re: One-liner for Remote Access VPN Statistics

Alexey_Klichins — Sat, 21 Mar 2020 16:48:14 GMT

great , I was looking for it.

The statistics match for the last hour/day/week ?

Re: One-liner for Remote Access VPN Statistics

Victor_MR — Sat, 21 Mar 2020 22:26:16 GMT

Very good! Thanks for sharing.

Re: One-liner for Remote Access VPN Statistics

PhoneBoy — Sat, 21 Mar 2020 23:52:58 GMT

These are live statistics from the gateway.
For historical data, you need reports like: https://community.checkpoint.com/t5/Remote-Access-Solutions/Monitoring-applications-and-data-volume-related-to-remote-access/m-p/79147#M2739
Or: https://community.checkpoint.com/t5/Visibility-Analytics/SmartView-VPN-Client-enhanced-view/m-p/78873#M48

Re: One-liner for Remote Access VPN Statistics

Danny — Sun, 22 Mar 2020 09:14:12 GMT

👍

Re: One-liner for Remote Access VPN Statistics

Wolfgang — Sun, 22 Mar 2020 11:02:16 GMT

@Danny

running in export mode is fine, but from Smartconsole repository some small formatting errors are seen.

Maybee you can find the problem.

Wolfgang

Re: One-liner for Remote Access VPN Statistics

Danny — Sun, 22 Mar 2020 15:39:52 GMT

Thanks @Wolfgang, I fixed it.

Re: One-liner for Remote Access VPN Statistics

Bechor — Sun, 22 Mar 2020 16:22:23 GMT

It will show also Capsule Workspace connected Users?

Capsule Workspace it part of MAB Portal Users count?

Re: One-liner for Remote Access VPN Statistics

Danny — Sun, 22 Mar 2020 20:07:31 GMT

Hi @Bechor, I've just included stats for Capsule Workspace users as well. ✔️

Re: One-liner for Remote Access VPN Statistics

Bechor — Mon, 23 Mar 2020 08:23:39 GMT

That's great!
Thank you!

Re: One-liner for Remote Access VPN Statistics

Eduardo_Pereira — Mon, 23 Mar 2020 12:00:24 GMT

Hi Danny, thank you for the great one-liner script!

It's certainly helping a lot.

Quick feedback on when running Gateways CG IaaS (VE), the outcome is "Not a firewall gateway!".

We had to bypassed it by getting rid of the first "if" of the script.

Re: One-liner for Remote Access VPN Statistics

PatrikSkoglund — Mon, 23 Mar 2020 13:54:34 GMT

Quality one-liners as always!

Re: One-liner for Remote Access VPN Statistics

Saagarg007 — Mon, 23 Mar 2020 16:10:01 GMT

Great script for quick stats,

so are they full day stats? or current stats?

Re: One-liner for Remote Access VPN Statistics

Danny — Tue, 24 Mar 2020 06:36:55 GMT

Thanks for the tip. I'll add the word 'current' to the title. The peak score is an overall status since last reboot of the system.

Re: One-liner for Remote Access VPN Statistics

Danny — Mon, 23 Mar 2020 19:02:36 GMT

Thanks @PatrikSkoglund! 😃

Re: One-liner for Remote Access VPN Statistics

Danny — Mon, 23 Mar 2020 20:20:50 GMT

Thanks for the enabled_blades tip, @Eduardo_Pereira, I just improved the One-liner to check the VPN blade.

Re: One-liner for Remote Access VPN Statistics

Emanuel_Miut — Tue, 24 Mar 2020 11:07:07 GMT

Great job! Thx for very useful one liner.

Re: One-liner for Remote Access VPN Statistics

Eduardo_Pereira — Tue, 24 Mar 2020 17:15:09 GMT

Hey @Danny,

This is a one-liner that I did for a client few days ago to monitor VPN clients and the performance of the appliance. It was a huge appliance with thousands of users.

It help to find any heavy connections and monitor the connected users real time.

Have you ever wrote something to find/monitor heavy connections/elephant flows? (VPN or not related).

Script:

watch -n 0.1 "echo ' CPU UTILIZATION'; printf '%.s-' {1..100}; echo;echo;mpstat -P ALL 1 1 | grep -v Average;echo;echo;echo;echo ' ENABLED BLADES'; printf '%.s-' {1..100};echo;enabled_blades;echo;echo;echo ' LAST INSTALLED POLICY'; printf '%.s-' {1..100};echo; fw stat | grep -o '.\{0,5\}2020.\{0,10\}';echo;echo;echo ' NUMBER OF CONNECTED USERS'; printf '%.s-' {1..100};echo;fw tab -t userc_users -s | grep userc_users | awk '{print \$4}';echo;echo ' NUMBER OF OFFICE MODE IPs'; printf '%.s-' {1..100};echo;fw tab -t om_assigned_ips -s | grep om_assigned_ips | awk '{print \$4}';echo;echo ' SHOW HEAVY CONNECTIONS'; printf '%.s-' {1..100}; echo;echo;fw ctl multik print_heavy_conn;echo;"

Attached a printscreen of the outcome as well.

Re: One-liner for Remote Access VPN Statistics

Danny — Tue, 24 Mar 2020 18:53:38 GMT

Thanks for sharing your code with us. 😀 I haven't yet created a solution to identify top VPN remote users.

It's impressive to see what we can bring up together while working from home focusing on getting home workers connected and protected maintaining their businesses during COVID-19.