Skip to main content
SONA
New Member
April 9, 2021
Question

Fortianalyzer 6.2 VPN user monitor report

  • April 9, 2021
  • 0 replies
  • 1896 views

Hello everyone

 

We are monitoring User vpn connections to our Fortigate Firewall (Using FAZ version 6.2.2). We currently using the steps of this kb: How to monitor the remote VPN users’ working hours (fortinet.com)

 

This generate a dataset with the following information:

 

User     First Login                    Duration

UserA   2021-01-15 8:00          10000

UserB   2021-01-15 8:05          12345

 

The first login is the first detected connection in the selected data range, if we generate this report daily we can get the time of day that users first connected and for how long. However our manager is asking to consolidate this report per day, that is, we need an output like this if we generate the data set for 2 days:

 

Date               User      First Login                    Duration

2021-01-15     UserA    2021-01-15 8:00          10000

2021-01-16     UserA    2021-01-16 8:01          10400

2021-01-15     UserB    2021-01-15 8:05          12345

2021-01-16     UserB    2021-01-16 8:02          10400

 

Do you have any ideas of how we can define the Dataset to generate this output?

 

Many thanks in advance

 

Regards,

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!