- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hello,
Currently we have 125 seats for Check Point Endpoint Container and 150 Seats for Check Point Endpoint VPN blade.
If we want to increase the number of concurrent connections from RA VPN OM, do we also need to increase the Endpoint Container Seats?
How can we check the RA VPN current connections?
I see different values from GUI (76 Remote Access Active Tunnels), and from cli i see 35 current and 56 peak:
fw tab -t userc_users -s
We are under R80.20 take 118.
Thanks,
Emi.
Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.
As for your other question, the following table of commands may help:
Table |
Output |
fw tab -t om_assigned_ips -f |
office mode users (including SNX and L2TP) |
fw tab -t sslt_om_ip_params -f |
SNX users |
fw tab -t L2TP_tunnels -f |
L2TP users |
vpn show_tcpt |
Will show the number of Office Mode users that are currently connected in Visitor Mode |
fw tab -t cvpn_session |
MAB users connected (not SNX just MAB portal) |
Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide
CPview (sk101878) can also show the information.
Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.
As for your other question, the following table of commands may help:
Table |
Output |
fw tab -t om_assigned_ips -f |
office mode users (including SNX and L2TP) |
fw tab -t sslt_om_ip_params -f |
SNX users |
fw tab -t L2TP_tunnels -f |
L2TP users |
vpn show_tcpt |
Will show the number of Office Mode users that are currently connected in Visitor Mode |
fw tab -t cvpn_session |
MAB users connected (not SNX just MAB portal) |
Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide
CPview (sk101878) can also show the information.
Is there any way to list users connected to VPN Remote Access for command line?
I try the command listusers but I believe it works for Mobile Access.
With fw tab -t om_assigned_ips -f I can know how many ip address of office mode are asigned but I cant look the users connected directly.
I dont have blade monitoring, because I have a gateway Standalone and I check with TAC and we cant enable blade monitoring. is there another way for know what are the users connected currently in the VPN??
Here is a one-liner to show a sum of all available Secure Client licenses and a overview of used licenses:
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY