- CheckMates
- :
- Products
- :
- Quantum
- :
- Remote Access VPN
- :
- Re: VPN Licensing and RA VPN curent tunnels
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
VPN Licensing and RA VPN curent tunnels
Hello,
Currently we have 125 seats for Check Point Endpoint Container and 150 Seats for Check Point Endpoint VPN blade.
If we want to increase the number of concurrent connections from RA VPN OM, do we also need to increase the Endpoint Container Seats?
How can we check the RA VPN current connections?
I see different values from GUI (76 Remote Access Active Tunnels), and from cli i see 35 current and 56 peak:
fw tab -t userc_users -s
We are under R80.20 take 118.
Thanks,
Emi.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.
As for your other question, the following table of commands may help:
Table |
Output |
fw tab -t om_assigned_ips -f |
office mode users (including SNX and L2TP) |
fw tab -t sslt_om_ip_params -f |
SNX users |
fw tab -t L2TP_tunnels -f |
L2TP users |
vpn show_tcpt |
Will show the number of Office Mode users that are currently connected in Visitor Mode |
fw tab -t cvpn_session |
MAB users connected (not SNX just MAB portal) |
Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide
CPview (sk101878) can also show the information.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Endpoint Container licenses themselves don't really enable any features, but allow other features to be added.
We also did away with Endpoint Container licenses a while ago, and depending on what SKU your VPN license(s) are, you might have more or less than you think.
You might want to check with Account Services to see how many VPN users you are really entitled to.
As for your other question, the following table of commands may help:
Table |
Output |
fw tab -t om_assigned_ips -f |
office mode users (including SNX and L2TP) |
fw tab -t sslt_om_ip_params -f |
SNX users |
fw tab -t L2TP_tunnels -f |
L2TP users |
vpn show_tcpt |
Will show the number of Office Mode users that are currently connected in Visitor Mode |
fw tab -t cvpn_session |
MAB users connected (not SNX just MAB portal) |
Another option is to use the new Remote Access Session Visibility tool.
You can see the possibilities in sk104644 and in the Admin Guide
CPview (sk101878) can also show the information.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is there any way to list users connected to VPN Remote Access for command line?
I try the command listusers but I believe it works for Mobile Access.
With fw tab -t om_assigned_ips -f I can know how many ip address of office mode are asigned but I cant look the users connected directly.
I dont have blade monitoring, because I have a gateway Standalone and I check with TAC and we cant enable blade monitoring. is there another way for know what are the users connected currently in the VPN??
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is a one-liner to show a sum of all available Secure Client licenses and a overview of used licenses:
R80.x - Secure Client License Counter Overview
