Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Emanuel_Miut
Participant
Jump to solution

VPN Licensing and RA VPN curent tunnels

Hello,

 

Currently we have 125 seats for Check Point Endpoint Container and 150 Seats for Check Point Endpoint VPN blade.

If we want to increase the number of concurrent connections from RA VPN OM, do we also need to increase the Endpoint Container Seats?

How can we check the RA VPN current connections?

I see different values from GUI (76 Remote Access Active Tunnels), and from cli i see 35 current and 56 peak:

fw tab -t userc_users -s

 

We are under R80.20 take 118.

Thanks,

Emi.

1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.

As for your other question, the following table of commands may help:

Table

Output

fw tab -t om_assigned_ips -f

office mode users (including SNX and L2TP)

fw tab -t sslt_om_ip_params -f

SNX users

fw tab -t L2TP_tunnels -f

L2TP users

vpn show_tcpt

Will show the number of Office Mode users that are currently connected in Visitor Mode

fw tab -t cvpn_session

MAB users connected (not SNX just MAB portal)

 

Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide

CPview (sk101878) can also show the information.

 

 

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.

As for your other question, the following table of commands may help:

Table

Output

fw tab -t om_assigned_ips -f

office mode users (including SNX and L2TP)

fw tab -t sslt_om_ip_params -f

SNX users

fw tab -t L2TP_tunnels -f

L2TP users

vpn show_tcpt

Will show the number of Office Mode users that are currently connected in Visitor Mode

fw tab -t cvpn_session

MAB users connected (not SNX just MAB portal)

 

Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide

CPview (sk101878) can also show the information.

 

 

Julian_Sanchez
Collaborator

Is there any way to list users connected to VPN Remote Access for command line? 

I try the command listusers but I believe it works for Mobile Access. 

With fw tab -t om_assigned_ips -f I can know how many ip address of office mode are asigned but I cant look the users connected directly. 

I dont have blade monitoring, because I have a gateway Standalone and I check with TAC and we cant enable blade monitoring. is there another way for know what are the users connected currently in the VPN??

 

0 Kudos
HeikoAnkenbrand
Champion Champion
Champion

Here is a one-liner to show a sum of all available Secure Client licenses and a overview of used licenses:

R80.x - Secure Client License Counter Overview

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events