Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
JasminThejojo
Explorer
Jump to solution

Qradar CheckPoint Logs :: User VPN Duration

Hi,

We fetch Checkpoint logs in Qradar. I'm looking for a way to find active ldap users and duration of active vpn from CheckPoint logs.

What is the correct way to do that? 

Any advice would be appreciated.

Best

Jasmin

 

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

As there is no explicit "log out" logged, there is no way to directly know (short of analyzing all logs generated by the user) which users are currently active and connected.

View solution in original post

1 Reply
PhoneBoy
Admin
Admin

As there is no explicit "log out" logged, there is no way to directly know (short of analyzing all logs generated by the user) which users are currently active and connected.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events