Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Herschel_Liang
Collaborator

How to disconnect SNX Users

Jump to solution

Some user's passwords may be forced to attack by blackhat. It was used to login in SNX VPN and want to attack the client LAN.

The client found that and is worried about it. They want to disconnect that connection first.

I gave him one command: RAsession_util terminate byuser xxx

After executing that command, he executed two below commands:

RAsession_util show users byname xxx

listusers

but the output is quite different. Did he disconnect SNX User successfully? Why? How should I help the client? Could someone kindly explain what is the difference between the two commands?

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Champion
Champion

I think you mix up RAsession_util show users all (only for MAB/SNX users) and the VPN tables listusers from sk152132: How to Monitor the Exact Number of Active VPN Tunnels ?

View solution in original post

0 Kudos
3 Replies
G_W_Albrecht
Champion
Champion

I think you mix up RAsession_util show users all (only for MAB/SNX users) and the VPN tables listusers from sk152132: How to Monitor the Exact Number of Active VPN Tunnels ?

View solution in original post

0 Kudos
Herschel_Liang
Collaborator

sk152132 explain is very useful, but I confuse mobile access VPN admin guide description:

Disconnecting Remote Access Users
To disconnect a user:
RAsession_util terminate {all|byuser <user>|bysession_id <id>|custom <sql
constraint>}

It seems like that "RAsession_util terminate XXX" can only disconnect remote access VPN users. I remember that remote access VPN is IPSec VPN while SNX is SSL VPN.

0 Kudos
G_W_Albrecht
Champion
Champion

EPS VPN, Mobile and SecuRemote are the three IPsec VPN flavours, while Mobile Access and SNX uses SSL VPN and can be influenced using RAsession_util.

0 Kudos