topic Re: VPN Licensing and RA VPN curent tunnels in SASE and Remote Access

VPN Licensing and RA VPN curent tunnels

Emanuel_Miut — Thu, 05 Mar 2020 20:15:56 GMT

Hello,

Currently we have 125 seats for Check Point Endpoint Container and 150 Seats for Check Point Endpoint VPN blade.

If we want to increase the number of concurrent connections from RA VPN OM, do we also need to increase the Endpoint Container Seats?

How can we check the RA VPN current connections?

I see different values from GUI (76 Remote Access Active Tunnels), and from cli i see 35 current and 56 peak:

fw tab -t userc_users -s

We are under R80.20 take 118.

Thanks,

Emi.

Re: VPN Licensing and RA VPN curent tunnels

PhoneBoy — Mon, 09 Mar 2020 01:54:22 GMT

Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.

As for your other question, the following table of commands may help:

Table	Output
fw tab -t om_assigned_ips -f	office mode users (including SNX and L2TP)
fw tab -t sslt_om_ip_params -f	SNX users
fw tab -t L2TP_tunnels -f	L2TP users
vpn show_tcpt	Will show the number of Office Mode users that are currently connected in Visitor Mode
fw tab -t cvpn_session	MAB users connected (not SNX just MAB portal)

Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide

CPview (sk101878) can also show the information.

Re: VPN Licensing and RA VPN curent tunnels

HeikoAnkenbrand — Thu, 19 Mar 2020 21:06:06 GMT

Here is a one-liner to show a sum of all available Secure Client licenses and a overview of used licenses:

R80.x - Secure Client License Counter Overview

Re: VPN Licensing and RA VPN curent tunnels

Julian_Sanchez — Mon, 31 Aug 2020 20:56:49 GMT

Is there any way to list users connected to VPN Remote Access for command line?

I try the command listusers but I believe it works for Mobile Access.

With fw tab -t om_assigned_ips -f I can know how many ip address of office mode are asigned but I cant look the users connected directly.

I dont have blade monitoring, because I have a gateway Standalone and I check with TAC and we cant enable blade monitoring. is there another way for know what are the users connected currently in the VPN??