CLI Command to check Authentication Activity

Hawkeye_Parker — Tue, 20 Aug 2019 12:50:26 GMT

Hi Checkmates,

Do we have any CLI command to check the device Authentication activity? I need to get the below details in CLI.

Re: CLI Command to check Authentication Activity

G_W_Albrecht — Tue, 20 Aug 2019 13:08:15 GMT

In Identity Awareness Administration Guide R80.20 p.161ff you will find the CLI commands for IA - adlog, pdp and pep !

Re: CLI Command to check Authentication Activity

Tal_Paz-Fridman — Tue, 20 Aug 2019 13:57:30 GMT

You can try the command cpstat identityServer -f <value> where the value can be:

default, authentication, logins, ldap, components, adquery, idc, muh

For example cpstat identityServer -f ldap gives:

Successful LDAP Queries: -
Unsuccessful LDAP Queries: -

For example cpstat identityServer -f ldap gives:

CaptivePortal: -
AD Query: -
Agent: -
Terminal Server: -
RADIUS Accounting: -
Remote Access: -
Identity Collector [Active Directory]: -
Identity Collector [Cisco ISE]: -
Identity Collector [Syslog]: -
Identity Collector [eDirectory]: -
Identity Awareness API: -
Users With Anti-Spoofing Protection: -
Successful User Logins [Kerberos]: -
Successful Machine Logins [Kerberos]: -
Successful User Logins [User name and password]: -
Successful User Logins [AD Query]: -
Successful Machine Logins [AD Query]: -
Unsuccessful User Logins [Kerberos]: -
Unsuccessful Machine Logins [Kerberos]: -
Unsuccessful User Logins [User name and password]: -

HTH

Tal

topic CLI Command to check Authentication Activity in Endpoint

CLI Command to check Authentication Activity

Re: CLI Command to check Authentication Activity

Re: CLI Command to check Authentication Activity