topic Re: Command to know encrypted and clear text communication in General Topics

Command to know encrypted and clear text communication

Vikram_Chhabra — Sat, 25 Aug 2018 19:47:08 GMT

is there any command to get the all encrypted and clear text communicating network from SG CLI.?

Actually I need to check how many networks are communicating in encrypted from and how many in clear text.? I have to make an list of both type communication.

Re: Command to know encrypted and clear text communication

JozkoMrkvicka — Sun, 26 Aug 2018 08:37:21 GMT

Option 1:

User SmartLog and see "Top Actions" on the left pane.

Option 2:

cpstat -f statistics vpn

Option 3:

cpview

Re: Command to know encrypted and clear text communication

PhoneBoy — Mon, 27 Aug 2018 04:12:30 GMT

It depends on how you are defining "encrypted" traffic.

Generally speaking it's better to do this from SmartLog or SmartEvent depending on your criteria and what you're licensed to use.

If you want to see what's active RIGHT NOW on the gateway then you'll have to parse the output of fw tab -t connections -u.

See this SK for details: Connections Table Format

Re: Command to know encrypted and clear text communication

Danny — Mon, 27 Aug 2018 06:59:15 GMT

I would use this one-liner to get a list of all networks behind all interfaces and check the VPN gateway object for the configured VPN encryption domain to get a list of all networks that are being encrypted.

Re: Command to know encrypted and clear text communication

JozkoMrkvicka — Mon, 27 Aug 2018 09:08:10 GMT

In case you have communication from one interface towards another on the same gateway, it is going as clear text, even both networks are in VPN domain.

Another exception is Excluded Services in VPN community.

One more exception are subnets written in crypt.def file.

In all of these scenario, particular subnets are inside VPN domains.