topic Re: VPN users query in SASE and Remote Access

VPN users query

Vladimir_S — Mon, 10 Jul 2023 19:43:28 GMT

Hello,

While ago CP support showed me how to write a short query in "SmartConsole -> Logs and Monitor" to identify currently connected VPN users. It was pretty simple query, but unfortunately, I do not remember syntax.

It can be done in SmartEvent now, but I am wondering if someone can help me write this short query w/o SmartEvent blade.

Thank you,

Vlad.

Re: VPN users query

KlowikiOne — Mon, 10 Jul 2023 19:50:49 GMT

listusers (checkpoint.com)

listusers

Description

Shows a list of end-users connected to the Mobile Access Gateway, along with their source IP addresses.

Syntax

listusers

Example

[Expert@MyGW:0]# listusers
------------------------------
UserName    | IP
------------------------------
Tom , 192.168.0.51
John , 192.168.0.130
Jane , 192.168.0.7
[Expert@MyGW:0]#

I hope this helps.

Re: VPN users query

Jerry_Eblin — Mon, 10 Jul 2023 20:43:06 GMT

Vladimer,

Are you looking for users that are connected to your Check Point gateway? If so, we use office mode and can pull this data using the "fw tab -t om_assigned_ips -u -f" command. It may be overkill for what you want/need though.

Jerry

Re: VPN users query

Vladimir_S — Thu, 13 Jul 2023 21:57:18 GMT

Hi,

I attempted run this command on the GW, but it did not bring any results. The SmartEvent shows a few SecuRemote connected.

I attached the screenshot.

Re: VPN users query

Danny — Thu, 13 Jul 2023 21:38:59 GMT

SmartConsole Extension - Show VPN Users

Re: VPN users query

Sean_OConnor — Thu, 13 Jul 2023 22:12:53 GMT

Hello Vlad,

Running the following commands on the VPN gateway, this has worked for me for collecting a list of currently connect VPN users, and we do not have the Mobile blade turned on.

# vpn tu tlist | grep User

Re: VPN users query

Vladimir_S — Mon, 17 Jul 2023 02:35:24 GMT

Thank you Sean. The commands works. Does this command have timestamp switch?

Re: VPN users query

Vladimir_S — Mon, 17 Jul 2023 03:01:13 GMT

Hi KlowikiOne,

I applied this command on the Gateway. We do not have a separate Mobile blade. Does listusers must be run on the Mobile blade?

Thank you,

Vlad.

Re: VPN users query

Zolo — Mon, 17 Jul 2023 05:51:44 GMT

#vpn tu tlist | grep <User> -B 4 | grep -E "<User>|Authenticated"

#vpn tu tlist -c ra_nat_t

#vpn tu tlist -h