End-Users connected in 1570 appliance

[ebalmon]

Hi mates,

Is there any way to see end-users connected via CLI in a 1570 appliance?

Thanks in advance

[Chris_Atkinson]

Just to confirm are you asking about VPN users or Admins connected via SSH or something else?

[ebalmon]

Users connected to LAN or WIFI

[Chris_Atkinson]

Is Identity Awareness enabled?

[ebalmon]

No, could you tell me about that?

[PhoneBoy · Accepted solution]

It's what allows you to associate IP addresses to usernames and requires a connection to your Active Directory server.
You configure it here:

Unfortunately, the only method supported on the SMB appliances currently is ADQuery, which may not work if your AD servers have recently been patched.
Refer to: https://community.checkpoint.com/t5/Security-Gateways/WMI-Permission-denied-From-this-months-Windows... 

[Lesley]

Try this one (I assume you mean VPN clients):

vpn tu tlist

vpn tu -t tlist

To be honest I would recommend the web interface. GAIA embedded has less commands for on the CLI so it is a bit limited. For example you cannot run cpview. 

[PhoneBoy]

cpview is available on SMB appliances with R81.10 firmware:

Not sure if information about connected VPN users is there.

[ebalmon]

Hi, 

sorry, I mean users connected to LAN or WIFI. Thanks for the tip

[G_W_Albrecht]

Use WebGUI - not CLI...

[ebalmon]

Hi,

It is a specific need to do it through the CLI to run it with a troubleshooting script. Shouldn't it be possible to do it if it's also done via GUI?

Thanks for your help

[G_W_Albrecht]

I think the scripting used for GUI can read details that are not directly available as commands in clish / bash. This would be a RFE...

[PhoneBoy]

If you have Identity Awareness enabled, you can use the various CLI commands to query said database (for example adlog a query all).
These are for regular gateways but the commands here should also work on the SMB appliances in expert mode: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_IdentityAwareness_AdminGuide...