Skip to main content
EGP
EGP
New Member
April 25, 2025
Solved

Export VPN user information to FortiAnalyzer

  • April 25, 2025
  • 3 replies
  • 1231 views

I want to create a dataset on my Fortianalyzer 7.4.6 that shows the following data:

1. Username
2. Group associated with the user
3. User type (Whether local or LDAP)
4. User status (Whether the user is enabled or disabled)
5. Authentication (If it's by email, bring the email associated with that account, or if it's by Fortitoken, bring the token associated with the account)

Last VPN connection I've tried Multiple Script, but it doesn't show any information. Does anyone have a script that can help me generate the requested data? Or how can I get this information from my Fortigate? Sorry for my English.

    Best answer by Anthony_E

    Hello,

     

    To export VPN user information to FortiAnalyzer, follow these steps: 

    1. Configure FortiGate to Send Logs: Access the FortiGate CLI. - Configure the FortiGate to send logs to the FortiAnalyzer by specifying the FortiAnalyzer's IP address and the source IP of the FortiGate's internal interface. ```shell config log fortianalyzer setting set status enable set server <FortiAnalyzer_IP> set source-ip <FortiGate_Internal_IP> set upload-option realtime end
    2. Ensure VPN Logs are Enabled: Make sure that VPN event logging is enabled on the FortiGate. This can typically be done through the FortiGate GUI under Log & Report settings.
    3. Verify Communication:Ensure that the FortiGate and FortiAnalyzer can communicate over the network. This may involve configuring routes and security policies to allow traffic between the devices.
    4. View VPN User Information on FortiAnalyzer: On the FortiAnalyzer, navigate to FortiView dashboards. - Use the VPN section to view SSL and Dialup IPsec user information, including connection and disconnection times.

     

    And your English is good :)!

     

    Regards,

    3 replies

    Anthony_E
    Staff
    Anthony_E
    Staff
    April 28, 2025

    Hello,


    Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


    Thanks,

    Best Regards
    Anthony_E
    Staff
    Anthony_E
    Staff
    April 30, 2025

    Hello,

     

    We are still looking for someone to help you.

    We will come back to you ASAP.


    Thanks,

    Best Regards
    Anthony_E
    Staff
    Anthony_EAnswer
    Staff
    May 2, 2025

    Hello,

     

    To export VPN user information to FortiAnalyzer, follow these steps: 

    1. Configure FortiGate to Send Logs: Access the FortiGate CLI. - Configure the FortiGate to send logs to the FortiAnalyzer by specifying the FortiAnalyzer's IP address and the source IP of the FortiGate's internal interface. ```shell config log fortianalyzer setting set status enable set server <FortiAnalyzer_IP> set source-ip <FortiGate_Internal_IP> set upload-option realtime end
    2. Ensure VPN Logs are Enabled: Make sure that VPN event logging is enabled on the FortiGate. This can typically be done through the FortiGate GUI under Log & Report settings.
    3. Verify Communication:Ensure that the FortiGate and FortiAnalyzer can communicate over the network. This may involve configuring routes and security policies to allow traffic between the devices.
    4. View VPN User Information on FortiAnalyzer: On the FortiAnalyzer, navigate to FortiView dashboards. - Use the VPN section to view SSL and Dialup IPsec user information, including connection and disconnection times.

     

    And your English is good :)!

     

    Regards,

    Best Regards
    Terms & ConditionsAccessibility statement