- Products
- Learn
- Local User Groups
- Partners
- More
Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT
What's New in Check Point SASE
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
AI Security Masters
Implementing the AI Security Trifecta
CheckMates Go:
Half is Not Enough
👍 Available as SmartConsole Extension
📊 Also available: Remote Access VPN Statistics
One-liner (Bash) to show all VPN users connected to a VPN gateway.
fw tab -t userc_users -f -u 2>/dev/null|tr ",;" "\n"|egrep "UserName|ConnectTime|SRAddress|Schema"|tr -d "\n"|sed "s/UserName/User/g; s/SRAddress:[[:space:]]/\n/g; s/Schema:/Type:/g; s/IKE/Endpoint Connect;/g; s/SSL/SSL Network Extender/g; s/([0-9])//g; s/CN=//g"|awk '{ print $0 " >",(strftime("%c",$NF))}'|tr -s ' '|sed "1d";cvpnd_admin license all 2>/dev/null|grep "User Name"|sed "s/^.*User Name/User/g"|awk 'BEGIN{FS="|"} {print $2 " Type: Mobile Access " $1" ConnectTime: 0"$3}'|sed "s/Session Expiration Time In Minutes/Expires/g"|sed "s/^ *//"|more
Integrated with our ccc script.
👍 Available as SmartConsole Extension
📊 Also available: Remote Access VPN Statistics
One-liner (Bash) to show all VPN users connected to a VPN gateway.
fw tab -t userc_users -f -u 2>/dev/null|tr ",;" "\n"|egrep "UserName|ConnectTime|SRAddress|Schema"|tr -d "\n"|sed "s/UserName/User/g; s/SRAddress:[[:space:]]/\n/g; s/Schema:/Type:/g; s/IKE/Endpoint Connect;/g; s/SSL/SSL Network Extender/g; s/([0-9])//g; s/CN=//g"|awk '{ print $0 " >",(strftime("%c",$NF))}'|tr -Great Tool!
But in my experience, it shows users who have already disconnected, even though querying the kernel table of assigned IP addresses with `fw tab -t om_assigned_ips -f` reveals that the user is no longer present and holds no IP address. Is there any tool—other than the command mentioned above—that shows Remote Access users (i.e., who is currently logged in) in real time?
Great Tool!
But in my experience, it shows users who have already disconnected, even though querying the kernel table of assigned IP addresses with `fw tab -t om_assigned_ips -f` reveals that the user is no longer present and holds no IP address. Is there any tool—other than the command mentioned above—that shows Remote Access users (i.e., who is currently logged in) in real time?
;About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY