- CheckMates
- :
- Products
- :
- Quantum
- :
- Remote Access VPN
- :
- collecting end RA user activity
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
collecting end RA user activity
Hi
I was asked to check if it is possible to collect information regarding end user remote access for the last a few months precisely when the user was connected with RA vpn client (days, hours). We don't have Smart Event license so I believe it may be hard
thanks
2 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The login & logout logs for VPN connections should be available for you to export/filter as a minimum. Do you know how to see those as-is?
CCSM R77/R80/ELITE
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
For a specific user or all users?
In general, this data is hard to obtain as the only thing we can reliably get is the user login action.
Logouts aren't always explicit (sometimes they are timeouts).
For a specific user, you might be able to search on the logs that user generated.
