SSH logging?

[Joe_Kanaszka]

Good morning!

Running R81.20

What is the best practice for monitoring and logging SSH sessions to our Security Gateways / SMS?

I'd like to be able to see a daily report for all sessions and what was done during the session if possible.

Thank you!

[AkosBakos]

Hi @Joe_Kanaszka 

I think you should use 3rd party solution for this.

Akos

[the_rock]

I was looking at the R82 smart event I have in my lab, but did not see anything specific for ssh logins.

Andy

[AkosBakos]

Maybe the parsing the /var/log/messages -> the logins are logged.

[G_W_Albrecht · Accepted solution]

Dashboard Audit Logs:

I connected with WinSCP first and then started Putty (shown log entry).

WHat was done is visible in Legacy SVTracker:

[the_rock]

That is indeed super useful, though wondering if there is a report for it in smart event?

Andy

[Joe_Kanaszka]

Thank you for this!  

[Joe_Kanaszka]

I forgot to ask you how you enter Legacy SmartView Tracker from Smart Log?

[the_rock]

Hey brother,

Hope what I attached helps. Its via smartview.

Andy

[Joe_Kanaszka]

Thank both you guys!

[the_rock]

Its not perfect, but better than nothing lol

Andy