RAS VPN Statistics

[Danny]

COVID-19 💊 We take care of your Remote Access VPN needs!
ℹ️ Supported from R80.30+

SmartConsole Extension to show a summary about the remote access statistics of a VPN gateway.
Extension URL: https://dannyjung.de/vpnstat.json

Uses the One-liner developed in this thread.

VSX gateways aren't supported yet (need to implement loading of VS environment and changing to VS)

Thanks to @PhoneBoy for license macro information in this thread. [ VPN License Guide ]
Thanks to @HristoGrigorov for SMB support and testing.
Thanks to @Eugene_Grybinny for describing the task-id, show-task process.
Thanks to CheckMates for these Remote Access SmartEvent Reports: Basic, Enhanced, Application Monitoring, Custom User Stats

[PhoneBoy]

Nice work!

[HristoGrigorov]

CheckPoint, I really really hope you understand how much am I frustrated of not being able to use this marvelous extension on my centrally managed SMBs!!!

I want this escalated right away and product manager to contact me with an explanation why so! And please skip "this is not on product roadmap" mumbo-jumbo... 😆

[Wolfgang]

nice 

[MartinTzvetanov]

Hello,

Cool tool but it works only in my lab with R80.40 :-).

I sent it to three of our customers:
1. R80.30 - after clicking on show statistics only a bracket is shown "(". Running the script manually on SSH it shows correct info.
2. R80.20 - impossible to add the json - it says The manifest is not valid.
3. R80.30 - no feedback yet.

Does it depends on the SmartConsole version or CheckPoint version or anything else? Any additional setting that must be turned on/off to make it work? Any file for debug info?
KR

[Danny]

Hi @MartinTzvetanov ,

thanks for your feedback on my SmartConsole Extension (SMX).

1. This happens when the customer doesn't confirm the user dialog after clicking the button. I'm still waiting on Check Points SMX team for advice how to handle these case in order to show a better result.
2. These SmartConsole Extensions are supported from R80.30+.

You can turn on debugs in SmartConsole just above the SMX import section.

[MartinTzvetanov]

Hi @Danny,

1. Click Show statistics -> Confirm the job and then nothing. I expect the second confirmation but it doesn't happen.

2. Make sense 🙂

[Danny]

Are you using the latest SmartConsole R80.30 (Build 62)? After confirming the task the SmartConsole should run it and show it's progress in the taskbar.

If no task is started on your side, you'll need to open a SR with Check Point support.

[MartinTzvetanov]

No task is started after the confirmation. I though that the problem might be with an old version of the SmartConsole but didn't have enough time to check it. I'll do it and update here

[MartinTzvetanov]

I did few tests and here are the results:

Updated to the latest SmartConsole - still no task is started. I played with the script and run it from the SmartConsole Script option and it said Not a VPN gateway. The one-liner script runs smoothly. The GWs are 6500, something related to the image that is installed?

However, I created a script in the script repository and it does the job.

[Eduardo_Pereira]

Hi @Danny 

Thanks for that again!

Just a quick feedback on Gateways running IaaS flavors, it is showing as "Not a VPN Gateway" 

I run my personal lab on Azure and I´m getting that message.

[Danny]

Hi @Eduardo_Pereira ,

please have a look at the originating One-liner and how it is identifying VPN gateways. Please advice how to adopt it to your Azure Gateway.

[Eduardo_Pereira]

As tested earlier, the one-liner works!

Hehe, I´m not quite sure why the script in SmartConsole had a different output.

[Eduardo_Pereira]

I'm not quite sure if you changed something on the code, but now it works!!

Tiny typo on the LICENSES table.

[MattGB7]

Hi @Danny , Great one liner and the extension looks amazing. When testing with SmartConsole 993000062 this causes the console to crash. The extension has been added, when I click "Show Statistics" and then aprove the changes by clicking "OK"  I get "SmartConsole has experieanced a serious problem and needs to re-launch"

Any ideas? 

Matt

[KS]

Hello

I have similar problems. Oneliner works fine on the GW when run as a script, but installed as a console extension causes it to crash or not providing any output - "Processing"

Testes on r80.30 JHF 155, SC xxx20 and xxx62 both had the same issue.

[Danny]

Did you already write to extensions@checkpoint.com ? Please send them the debug files described by @Tomer_Sole in this post.

[KS]

Hello again

Funny thing .... 

Tested it again, installed extenstion on SC xxx62 and this time it works flawless.

Nothing has changed in last 3 hours, looks like removing and installing extension back somehow did  the trick. Strange.

In this case there is no point for me to do a debug 😉

[Danny]

Thanks for your reponse. It seems that SmartConsole has some stability issues with extensions. Also when you activate more than one extension at the same time and switch between the extension then SmartConsole has issues to run the correct extension. So please report any issues to Check Point so we can hopefully get better extension functionality in future SmartConsole builds.

[Matthias_Kring]

The extension is installed properly, but after starting, I only get "ESC to cancel" message. Nothing els happens.

The one-liner script runs fine.

However, I noticed several Administrator login failures with unknown reason coming from the same PC where Smartvonsole is running. Do I need to set som credentials ?

(Console 80.30  993000062)

[Danny]

Did you already write to extensions@checkpoint.com ? Please send them the debug files described by @Tomer_Sole in this post.

[Matthias_Kring]

the files described by Tomer Sole don't exist. I just re-installed and tried again. As soon, as I start the extension, I get Administrator logon failures. So, no files will be written.

Well, at least, I've sent him the cpm*elg* files.

[Baasanjargal_Ts]

Hello.

I tried it. SmartCenter name not found error happens.

[Danny]

@Baasanjargal_Ts : Please write to extensions@checkpoint.com and ask for support. It is their routine to read out the SmartCenter name.

[Baasanjargal_Ts]

Got it. Thanks.

[Chris_Newman]

Interested in what you hear back. Thank you.

[Baasanjargal_Ts]

I sent email. But they redirecting to owners of extensions.

[Danny]

Users of Check Points MaaS solution, don't have a SmartCenter (firewall management) object within the 'Gateways and Servers' view in your web-based SmartConsole. I improved the extension to send the script commands directly on the selected gateway if no SmartCenter object is available. Alternatively you can also import this one-liner it into the scripts repository of your web-based SmartConsole to run it from there.

[Baasanjargal_Ts]

It works now.
Thanks Danny.

[ReneN]

this Extension works realy good. nice work