Skip to main content
ssanga
Staff & Editor
Staff & Editor
September 30, 2024

Technical Tip: How to Identify the Connection Times for a User's Dial-Up IPSEC VPN Tunnel

  • September 30, 2024
  • 0 replies
  • 923 views
Description

This article explains how to check when a user is connected to the dial-up IPsec VPN tunnel.

Scope FortiGate.
Solution

To check when a user last connected to the IPsec VPN:

Log into the FortiGate GUI and navigate to Log & Report -> System Events -> VPN Events, select 'Configure Table' to add the columns 'Action' and 'XAUTH User', then filter the events with 'Action' set to 'tunnel-up' and 'XAUTH User' as the specific username.

 

ConfigureTable.png

 

Select User and Xauth.png

 

Details.png

 

This will display the connection times for that user's VPN connection.

 

If the user is still connected, it is possible to view how long they were connected for by adding a 'Created' column in the IPsec Monitor. For details, see Technical Tip: How to identify the uptime of an IPsec tunnel.