Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 

Show VPN Users

Danny
Champion Champion
Champion

SmartConsole Extension to show all VPN users connected to a VPN gateway.
Extension URL: https://dannyjung.de/vpnuser.json

Supported Client types:

  • Endpoint Connect
  • SSL Network Extender
  • Mobile Access

Also available as CLI script.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free

Disclaimer: Check Point does not provide maintenance services or technical or customer support for third party content provided on this Site, including in CheckMates Toolbox. See also our Third Party Software Disclaimer.




42 Replies

lfcalves
Participant

Hi Danny, 

Do you have a script like this that runs on version R80.40+?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Sure, here it is.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Linus
Contributor

Hello  @Danny 

I am getting "Unsupported" message after I click on "Show VPN User".

My gateway is R81. Do you have an idea ?

 

Thank you !

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

What type of gateway is it?

  • Cluster, single gateway, SMB?
  • Can you share a screen shot?
;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Linus
Contributor

Hello,

 

it is a single gateway.

 

CP.JPG

 

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Fixed. Should be working now.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Linus
Contributor

Hi  @Danny !

Unfortunately I am still getting "Unsupported".

I did remove the extension and add it again. The CLI one-liner works like charm tho.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Then please install my helper extension https://dannyjung.de/smx.json and tell me, what the "type" and "vpn" fields contain. My extension currently performs this check:


    check "type" == 'CpmiClusterMember' or 'simple-gateway' check "vpn" == true or 'true'
   
;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Linus
Contributor
"type" : "simple-gateway"
"vpn" : true
 
Is what I got
;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

"type":"session" doesn't look right. Please send me the full output (delete your IP adresses) via PM so I can have a look.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Linus
Contributor

I did paste the wrong "type" field as there are several.

The field you are looking for shows: "type":"simple-gateway"

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

It appears that the run-script parameter--sync false sometimes causes an issue. I adjusted the extension to work without it. As confirmed that the extension now works for you.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

CheckPointerXL
Advisor

Hello Danny,

I'm gettin "Unsupported" too. R81 JHF 44

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Danny
Champion Champion
Champion

@Gabriele: Could you please try again?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

CheckPointerXL
Advisor

Yes, now it works!

Thank you !

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

jaimej
Employee
Employee

HI  @Danny , Using MGMT + GW in R81.10, after pressing show VPN users, the extension keeps loading and nothing happens. Can you check it please?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

This is a known issue with R81.10 as document here.
You'll need to install the latest R81.10 Ongoing Take to fix it.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


(1)

jaimej
Employee
Employee

Thanks I updated my environment and works perfect!

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Alexey_Dagil
Participant

Hi Danny!

Is this tool works on SMB gateways?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Sorry, no.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

skandshus
Advisor
Advisor

I’ve been needing this!

does it work in r81.10 & maybe r81.20?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Yes, of course.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Eitan_H
Explorer

Hi Danny,

Running this on R81.10 take 66 cluster did not work. Stuck on uploading (screenshot attached).

Any Screenshot 2022-08-19 142417.jpg idea how to solve this issue?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

You are supposed to run this on a specific cluster member, not on the cluster object.
Is this the only SmartConsole extension that doesn't work for you?
Is the result shown in the action result details?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

maza
Explorer

I also have the same version and patch. After running Show VPN Users, the Task in Progess in the lower left corner has prompted the script to run, but a few minutes later, the interface returned to the original appearance, and no user was displayed

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

That's a SmartConsole bug which is described here.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

mp76
Explorer

Hi Danny
Works great!.....but it doesn´t seem to update when a vpn-user log out
I only want to see current logged on vpn users....is this possible?

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

dotank
Explorer

hi

 

how do i run this script?

i have a GW in a lab, version 81.

i copy this script to one time script and i have installed that but it is not working for me.

 

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

@mp76 :

This extension simply runs two VPN CLI commands (1, 2) and shows their output nicely formatted in SmartConsole.
If these commands return users that are already logged out for several hours, I suggest to open a support case with TAC.

@dotank :

In SmartConsole go to 'Manage & Settings > Preferences > SmartConsole Extensions > Import'. Enter the extension URL. Then go to 'Gateways & Servers', select your VPN gateway and open the new 'VPN Users' tab. Push the button to

...;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos