topic Re: A Basic Remote Access Report for R80.x in Firewall and Security Management

A Basic Remote Access Report for R80.x

PhoneBoy — Sun, 15 Mar 2020 04:45:06 GMT

Found a report someone built that is likely not everything you might want for a report on Remote Access usage, but it could be a start.
It'll be interesting to see the community can improve on this.

To import this report, click the Import Template button under the Actions menu in Logs and Monitor > Reports.

A sample PDF is attached.
The ZIP file contains the report template to import.

Re: A Basic Remote Access Report for R80.x

Bac26 — Sun, 15 Mar 2020 17:00:11 GMT

Import failed on version 80.30

Re: A Basic Remote Access Report for R80.x

PhoneBoy — Mon, 16 Mar 2020 01:05:41 GMT

What errors did you get?

Re: A Basic Remote Access Report for R80.x

Bac26 — Mon, 16 Mar 2020 07:35:24 GMT

simply "import failed" see attached

Re: A Basic Remote Access Report for R80.x

Wolfgang — Mon, 16 Mar 2020 08:38:31 GMT

@PhoneBoy import of the MACOS report is failing.

The other works fine.

Wolfgang

Re: A Basic Remote Access Report for R80.x

Eduardo_Pereira — Mon, 16 Mar 2020 18:05:48 GMT

Indeed the Win report is working fine.

Re: A Basic Remote Access Report for R80.x

Kim_Moberg — Mon, 16 Mar 2020 18:09:29 GMT

Works perfect.

thanks

Re: A Basic Remote Access Report for R80.x

Bac26 — Tue, 17 Mar 2020 06:34:31 GMT

Works great now

Thanks
Fabio

Re: A Basic Remote Access Report for R80.x

PhoneBoy — Tue, 17 Mar 2020 23:41:12 GMT

Ah yes, that's what happens when I try and generate a ZIP file on the Mac 🙄

Re: A Basic Remote Access Report for R80.x

gerview007 — Tue, 24 Mar 2020 18:02:13 GMT

thanks for the report.
where can I get more reports like this?

Re: A Basic Remote Access Report for R80.x

Jenni_Guerrica — Sat, 28 Mar 2020 01:38:59 GMT

Is there a way to get a report template that just lists the users who connected in whatever time I choose and how long they were connected?

I really just need a basic report:

List the users -- > time connected, that I can export in excel and give to management

Re: A Basic Remote Access Report for R80.x

PhoneBoy — Sat, 28 Mar 2020 02:07:40 GMT

Maybe a version of this report will give you what you need: https://community.checkpoint.com/t5/Remote-Access-Solutions/Monitoring-applications-and-data-volume-related-to-remote-access/m-p/79147#M2739

Re: A Basic Remote Access Report for R80.x

Jenni_Guerrica — Sat, 28 Mar 2020 02:10:07 GMT

I found my issue but I don't know how to fix, for some reason it's logging every few second for logins. So I can't generate any good reports. I only get 4.5 minutes for 1000 logs. If I try to increase the logs SmartEvent dies.

Re: A Basic Remote Access Report for R80.x

Jenni_Guerrica — Sat, 28 Mar 2020 02:15:44 GMT

Here is a screen print.

Re: A Basic Remote Access Report for R80.x

PhoneBoy — Sat, 28 Mar 2020 02:43:15 GMT

You might want to get the TAC involved as I don't think that should be happening.

Re: A Basic Remote Access Report for R80.x

Jenni_Guerrica — Sat, 28 Mar 2020 02:47:33 GMT

I'm on the phone with Diamond now, it seems to only be happening in SmartEvent. If I look up an individual in Smart log it's accurate.

Re: A Basic Remote Access Report for R80.x

PhoneBoy — Sat, 28 Mar 2020 04:04:11 GMT

I figured it was something in SmartEvent which means there's likely a bug.

Re: A Basic Remote Access Report for R80.x

Florian_Winterb — Sat, 28 Mar 2020 05:55:25 GMT

nice

Re: A Basic Remote Access Report for R80.x

Kevin_Stanton — Thu, 02 Apr 2020 16:46:45 GMT

Absolutely fantastic Gents works a treat. Thankyou

Re: A Basic Remote Access Report for R80.x

NetBug1997 — Tue, 07 Apr 2020 15:58:51 GMT

Hi Jenni_Guerrica
Could you please share with us your report template as we are looking for identify users who are using Capsule VPN.
Thanks!