topic Re: Remote access view in GUI, SmartConsole in API / CLI Discussion

Remote access view in GUI, SmartConsole

vinceneil666 — Mon, 16 Mar 2020 08:27:03 GMT

Hi guys,

-> fw tab -t userc_users -s

Is it possible to have this punched in as an extension in SmartConsole ? - we do operate customers with different set of skill level, and lic level on their management.

Anyone done anything like this ?

Re: Remote access view in GUI, SmartConsole

Maarten_Sjouw — Mon, 16 Mar 2020 09:14:55 GMT

Go to the logs & monitor page and select or create a new tab.
In the bottom left you see external Apps, Tunnel& User Monitoring which starts the good old SmartVie Monitor. In there select the gateway and you see in the bottomhalf of the screen the IP-Sec counters, among it the number of users connected through IP-Sec VPN.

Re: Remote access view in GUI, SmartConsole

Danny — Mon, 16 Mar 2020 09:51:08 GMT

The problem is the big difference between SmartView Monitor and CLI I always encounter.

SmartView Monitor:

CLI

Where is SmartView Monitor getting it's values for Remote Users from?

Re: Remote access view in GUI, SmartConsole

Maarten_Sjouw — Mon, 16 Mar 2020 09:55:34 GMT

I do not have this issue, at least not with the R77.30 gateway I just checked, I just after that checked a R80.10 gateway as well and did see a difference ther, the gateway said 43 peak and the SV Monitor showed 52...

Hmmmm do not know what to make of it.

Re: Remote access view in GUI, SmartConsole

Nik_Bloemers — Mon, 16 Mar 2020 10:08:47 GMT

Same here, it doesn't even come close. I have no idea where the value in Monitor comes from.

Re: Remote access view in GUI, SmartConsole

Maarten_Sjouw — Mon, 16 Mar 2020 10:16:51 GMT

So we can conclude that when the GW is still running R77.30 it matches the value on the GW but as soon as you run anything R80 the match is gone?
So it is again like so many other small things broken since the migration to R80.x

Re: Remote access view in GUI, SmartConsole

Tobias_Moritz — Mon, 16 Mar 2020 14:50:30 GMT

The same wrong number visible in SmartConsole/SmartViewMonitor/GaiaDashboard is also readable over SNMP.

See thread https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Query-RAS-user-count-using-API/m-p/78387 for reference.

Looks like we all have common problems these days with the increased usage of remote working.

Re: Remote access view in GUI, SmartConsole

vinceneil666 — Mon, 16 Mar 2020 20:35:32 GMT

So back to my original question 🙂 - anything fancy we could do with extensions ?

Re: Remote access view in GUI, SmartConsole

kb1 — Mon, 16 Mar 2020 22:16:53 GMT

i have a doubt, the remote user tunnels that we see, is that the total number of connections between the gateway and all users combined?or something else?

Re: Remote access view in GUI, SmartConsole

PhoneBoy — Tue, 17 Mar 2020 00:50:53 GMT

I would encourage TAC cases for this issue so we can get to the bottom of it.

Re: Remote access view in GUI, SmartConsole

PhoneBoy — Tue, 17 Mar 2020 00:55:37 GMT

Very likely as this is something you can fetch over the API, and thus serve up as an extension.
Developer guide for SmartConsole Extensions: https://sc1.checkpoint.com/documents/SmartConsole/Extensions/index.html
However, it may be easier to just code up a simple script that you can save and run from SmartConsole.

Re: Remote access view in GUI, SmartConsole

Danny — Sat, 25 Apr 2020 20:37:00 GMT

SmartConsole Extension for Remote Access VPN Statistics