Help on process to export historical VPN users

[nilanjan_lahiri]

Hello All,

Need an urgent help please. I need to derive the list of users who connected to the VPN over a period of last 30 days. We have C2S VPN configured on our Checkpoint firewall (6400, R80.40) and users connect via Capsule VPN/ Checkpoint VPN Client.

1) I can download the log files locally via WinSCP but those files are not readable using Notepad++, etc

2) The Log Viewer in Smart Console doesn't show more than 50 results at a time

Please could someone help on this...

Thank You,

Nilanjan 

[emmap]

If you browse to the IP address of the smartcentre server and load web smartconsole you can export more logs. https://a.s.d.f/smartconsole/

Editing this for future historians: I was mistaken and I had intended to direct to SmartView per Martijn's post below for log exports.

[nilanjan_lahiri]

I need the method to derive the list of users who have connected to the VPN during the last 30 days please...

[Martijn]

Hi,

Have you tried to use SmartView web? 

https://<IP-SmartCenter>/smartview

Select VPN blade only. Select last 30 days and filter out any unwanted data. For example S2S VPN's.
Try to filter on login actions. Then in the top right, select Options -> Export -> Export to CSV.

Let us know how this goes.
Martijn

[nilanjan_lahiri]

Hello,

I did try but it shows as "Query Failed". 

Thanks...

[PhoneBoy]

What precise query did you use to do this?

[nilanjan_lahiri]

The Smart View itself is showing "Query Failed" even before I am running the query. Not sure if is activated or not... 

[PhoneBoy]

Make sure this is enabled in the management object:

[Martijn]

Hi,

Is you SmartCenter also the log server or do you have a dedicated log server / SmartEvent server where logs from the gateways are send to?

If that is the case, you need to open SmartView web on that server and not SmartCenter.

Martijn

[nilanjan_lahiri]

Hi Martijn,

When I am opening Smart View from the browser, it is showing the attached error, even before running any query.

[PhoneBoy]

Try this SK: https://support.checkpoint.com/results/sk/sk180182