topic GAIA Remote Access tunnels count in Firewall and Security Management

GAIA Remote Access tunnels count

Gusa2727 — Fri, 22 May 2020 15:32:26 GMT

I have detected a weird output in my security gateway when I was trying to figure out how many concurrent VPN connections we had. I have run the following commands:

fw tab -t om_assigned_ips -s

fw tab -t userc_users -s

cpview (and navigate to software-blades->VPN)

The output of these commands make sense but then when I check Remote Access Tunnels in SMS or in GAIA GUI, I can see a lot Remote Access Tunnels which do not match with the CLI output. I have attached a screen where you can check the ouputs I have mentioned. Any idea about why I am getting this discrepancy? Thanks.

Best Regards.

Re: GAIA Remote Access tunnels count

PhoneBoy — Fri, 22 May 2020 21:29:51 GMT

The fw tab commands you refer to count the number of Office Mode IPs and users authenticated via VPN.
userc_users is considered the most accurate if you're talking about Remote Access users currently connected as users can connect with methods that don't require an Office Mode address (e.g. SecuRemote).

IKE SAs refers to all VPNs (not just remote access ones).
Not sure what counters the Gaia WebUI and/or SmartConsole are showing, but it may be over time as opposed to realtime numbers.

Re: GAIA Remote Access tunnels count

Gusa2727 — Mon, 25 May 2020 08:23:06 GMT

Thanks!