topic Re: USER REPORT BY VPN in Firewall and Security Management

USER REPORT BY VPN

joelalvarezs — Fri, 27 Mar 2020 14:28:05 GMT

Dears my name is joel I´m From chile.

I have problem for create a view for activity vpn by user. i´m looking for a report or view where I can get information by vpn user.
for example:

Name, login, logout, source and destiny.

Only I can get this information in view , but i can´t get destination information.

my idea is obtain this information in a view o report.

thanks for all, greetings from chile

PhoneBoy — Sat, 28 Mar 2020 02:45:27 GMT

joelalvarezs — Tue, 31 Mar 2020 19:13:09 GMT

but I can't find a report that include destination too

PhoneBoy — Wed, 01 Apr 2020 00:20:28 GMT

What you showed in your screen shot are connection logs.
SmartEvent does not index these by default, which is why the destination won't show up most likely.
Some discussion about this topic here: https://community.checkpoint.com/t5/Logging-and-Reporting/Creating-reports-with-tracking-quot-per-connection-quot/m-p/30158

You can address this by making this change in SmartEvent (note: will have a performance impact on SmartEvent server):

Or by setting the relevant rules to log Per Session. Select "log" in the logging column of the relevant rule(s), then right-click and select More:

Note this requires App Control to be activated in the layer and/or the rules be set to use Accounting log.