topic Re: SmartConsole Extension in SmartConsole Extensions

PEP Session Viewer

Vincent_Bacher — Thu, 15 Jan 2026 14:35:06 GMT

PEP Sessions Viewer

Extension URL: https://vbacher.de/pep-sessions.json

Author: Vincent Bacher (vbacher.de) | Version: 1.0 | License: Free to use

Overview

SmartConsole extension for viewing active PEP (Policy Enforcement Point) sessions directly in the gateway Details Panel. Provides real-time session data with search, filter, and drill-down capabilities using the smxProxy API.

Key Features

Session View: Up to 2000 active sessions per gateway
Server-side Search: grep-based filtering on gateway before loading data
Click-to-Detail: Interactive cells for Username/Machine/Client IP → detailed PEP query results in modal
Sortable Columns: Username, Machine, Client IP, PDP IP, UID
Detail View: 8 fields including Identity Roles, Log Username, Client Type
Multi-Domain Support: Automatically inherits domain context

Requirements

Component	Requirement
SmartConsole	R80.40 or higher, Extension API 1.2+
Gateway	Identity Awareness blade enabled, PEP command support
Permissions	`get-read-only-session`, `run-read-only-commands`
Network	HTTPS access to extension URL

Installation

Open SmartConsole → Manage & Settings → Extensions
Click Install Extension
Enter URL: https://vbacher.de/pep-sessions.json
Accept permissions

Usage

Open any Gateway/Cluster object
Select PEP Sessions tab in Details Panel
Click Refresh Sessions

Verify Gateway Support

clish -c "pep help"

Technical Details

Architecture

API: Uses SmartConsole smxProxy.sendRequest('request-commit')
Commands: pep s u a (list), pep s u q usr/mchn/cid (detail)
Execution: Base64-encoded commands via run-script
Parsing: Custom PEP output parser for both list and detail formats
Performance: 2000 session limit, 90s timeout

Search Modes

Local: Type in search box → filters loaded sessions client-side
Remote: Enter term + click Refresh → executes pep s u a | grep -i "term" on gateway

Data Flow

User clicks Refresh → Extension builds base64 command
SmartConsole sends command to Management Server
Management executes on gateway via run-script
Response base64-decoded and parsed
Displayed in table with interactive cells

Use Cases

Terminal Server: View all sessions from single machine (click Machine column)
User Tracking: Find all sessions for user across multiple IPs (click Username)
Troubleshooting: Verify Identity Agent connectivity, check assigned roles
Audit: Review active sessions, client types, authentication methods

Limitations

2000 Session Limit: Large environments may have more sessions. Use search+refresh to filter on gateway.
90s Timeout: Normal for 2000 sessions, may timeout on slow Management API.
PEP Only: Works with PEP sessions. PDP extension planned separately.

Troubleshooting

Error: "This service is not available"

Restart SmartConsole (complete restart required)
Verify URL accessible from workstation
Check extension loaded in Manage & Settings → Extensions

Error: "No sessions found"

Verify Identity Awareness blade enabled on gateway
Test manually: clish -c "pep s u a"
Check gateway has active sessions

Error: "Gateway command failed"

Gateway may not support PEP commands
Verify clish access: pep help
Check Management API connectivity

Screenshots

Future Enhancements

PDP session viewer (separate extension)
CSV export
Custom column configuration
Session history tracking

Support

Author: Vincent Bacher | Website: vbacher.de
Post questions/feedback in this thread.

Installation URL: https://vbacher.de/pep-sessions.json

Re: SmartConsole Extension

the_rock — Thu, 15 Jan 2026 12:51:47 GMT

Yes sir, happy to give it a go.

Re: SmartConsole Extension

Vincent_Bacher — Thu, 15 Jan 2026 12:56:20 GMT

vbacher.de/pep-sessions.json

In Gateways&Servers Section when selecting a gateway, you see the pep session tab. Here you can click on refresh, then it sends the request and hopefully the session list will be displayed (currently limited to 2000 to reduce load) and you have a search box to search for anything linke username or machine name or client ip.
Once the list is shown, you may click on username or machine name oder client id to show more details like access roles.

Re: SmartConsole Extension

the_rock — Thu, 15 Jan 2026 12:57:45 GMT

Give me few mins, will test it and paste a screenshot of what it shows.

Re: SmartConsole Extension

the_rock — Thu, 15 Jan 2026 13:03:15 GMT

Looks right to me!

Re: SmartConsole Extension

Vincent_Bacher — Thu, 15 Jan 2026 13:05:56 GMT

Thanks. Happy to see. So in case anybody is interested and has ideas to improve or something to add, feel free 🙂

Re: SmartConsole Extension

the_rock — Fri, 16 Jan 2026 00:51:59 GMT

Wanted to test it a bit more today, but got real busy. Will do it Friday.

Re: SmartConsole Extension

the_rock — Sat, 17 Jan 2026 02:13:57 GMT

Hey Vince,

Tried it today on few more gateways, worked well.

Nice weekend!

Re: SmartConsole Extension

Vincent_Bacher — Sat, 17 Jan 2026 13:12:35 GMT

Thanks for testing.

To be honest, it doesn't make sense for us to list all sessions, as we always have 5-digit session numbers, but I found it useful to search explicitly for sessions and identify the access roles, especially for our colleagues in day-to-day operations for troubleshooting.

Re: SmartConsole Extension

the_rock — Sat, 17 Jan 2026 13:14:54 GMT

I set up brand new R82 cluster in the lab, so will do some testing on it tomorrow.

Re: SmartConsole Extension

the_rock — Sun, 18 Jan 2026 18:21:28 GMT

Just did some more tests on R82 lab cluster, all good!