Skip to main content
dfish85
New Member
February 3, 2022
Question

FortiView Sources SSL VPN Clients

  • February 3, 2022
  • 4 replies
  • 2784 views

Hello

 

Is there a way to show SSL VPN clients under Fortiview sources?  I can only see information on internal hosts.  Running version 6.4.8.  Thanks

4 replies

Debbie_FTNT
Staff & Editor
Staff & Editor
February 3, 2022

Dear dfish85,

you should see SSLVPN clients with their SSLVPN IPs, if they are connected via tunnel-mode.

Debbie_FTNT_0-1643907376692.png

Web-mode VPN will not show, as FortiGate basically acts as a proxy for those sessions, with sessions terminating on the FortiGate directly.

 

There is also an SSLVPN widget where you can see active SSL-VPN (tunnel) connections.

dfish85
dfish85Author
New Member
February 3, 2022

Thanks for the response.  They are all tunneled connections but nothing showing in the sources.  I can get the information I need by drilling into the Fortiview policies section but thought it was weird the sources section had no VPN hosts.  Maybe a version issue?  I never really noticed it before.  Thanks

Debbie_FTNT
Staff & Editor
Staff & Editor
February 4, 2022

Hey dfish - the screenshot is from my lab FGT in 6.4.6, I don't think it would be a version issue.

If there is no active traffic through the VPN you're not going to see any sessions; that session in the screenshot is from a ping and disappeared a minute later when the ICMP session timed out.

There is an SSLVPN dashboard widget that shows current tunnels, but doesn't tell you if/how many traffic sessions there are for that tunnel/user

robertoperez
New Member
August 2, 2023

you fix that? have same problem

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!