topic Re: Help on process to export historical VPN users in Firewall & Security Management

Help on process to export historical VPN users

nilanjan_lahiri — Wed, 08 Apr 2026 10:56:53 GMT

Hello All,

Need an urgent help please. I need to derive the list of users who connected to the VPN over a period of last 30 days. We have C2S VPN configured on our Checkpoint firewall (6400, R80.40) and users connect via Capsule VPN/ Checkpoint VPN Client.

1) I can download the log files locally via WinSCP but those files are not readable using Notepad++, etc

2) The Log Viewer in Smart Console doesn't show more than 50 results at a time

Please could someone help on this...

Thank You,

Nilanjan

Re: Help on process to export historical VPN users

emmap — Thu, 09 Apr 2026 01:22:11 GMT

If you browse to the IP address of the smartcentre server and load web smartconsole you can export more logs. https://a.s.d.f/smartconsole/

Editing this for future historians: I was mistaken and I had intended to direct to SmartView per Martijn's post below for log exports.

Re: Help on process to export historical VPN users

nilanjan_lahiri — Wed, 08 Apr 2026 12:03:11 GMT

I need the method to derive the list of users who have connected to the VPN during the last 30 days please...

Re: Help on process to export historical VPN users

Martijn — Wed, 08 Apr 2026 12:58:43 GMT

Hi,

Have you tried to use SmartView web?

https://<IP-SmartCenter>/smartview

Select VPN blade only. Select last 30 days and filter out any unwanted data. For example S2S VPN's.
Try to filter on login actions. Then in the top right, select Options -> Export -> Export to CSV.

Let us know how this goes.
Martijn

Re: Help on process to export historical VPN users

nilanjan_lahiri — Wed, 08 Apr 2026 13:21:20 GMT

Hello,

I did try but it shows as "Query Failed".

Thanks...

Re: Help on process to export historical VPN users

PhoneBoy — Wed, 08 Apr 2026 15:19:55 GMT

What precise query did you use to do this?

Re: Help on process to export historical VPN users

nilanjan_lahiri — Thu, 09 Apr 2026 04:32:30 GMT

The Smart View itself is showing "Query Failed" even before I am running the query. Not sure if is activated or not...

Re: Help on process to export historical VPN users

Martijn — Thu, 09 Apr 2026 06:44:08 GMT

Hi,

Is you SmartCenter also the log server or do you have a dedicated log server / SmartEvent server where logs from the gateways are send to?

If that is the case, you need to open SmartView web on that server and not SmartCenter.

Martijn

Re: Help on process to export historical VPN users

PhoneBoy — Thu, 09 Apr 2026 15:57:01 GMT

Make sure this is enabled in the management object:

Re: Help on process to export historical VPN users

nilanjan_lahiri — Fri, 10 Apr 2026 08:50:37 GMT

Hi Martijn,

When I am opening Smart View from the browser, it is showing the attached error, even before running any query.

Re: Help on process to export historical VPN users

PhoneBoy — Fri, 10 Apr 2026 13:47:19 GMT

Try this SK: https://support.checkpoint.com/results/sk/sk180182