How to view network traffic for ssl vpn connection

Forum|Forum|2 years ago
July 10, 2024
4 replies
4444 views

Hello expert,

I configured a ssl vpn remote and was successful able to establish a remote session from my laptop.

how can i view the entire logs for any attempt from my laptop to resource on the "lan" network behind the FortiGate.

I search under log and report forward traffic unsure if I am searching the correct place but I am not seeing any inbound traffic.

I humbly request some guidance.

Thanks

Regards

FortiGate

Best answer by Toshi_Esumi

It depends on your FortiOS version on the FGT if you want to use GUI to sniff. But check this KB:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Packet-Capture-on-FortiOS-GUI/ta-p/194444

If you're ok with CLI, it has't changed almost since the inception of FGT.
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-the-FortiOS-built-in-packet-sniffer/ta-p/194222

Toshi

Toshi_Esumi

SuperUser

No. You wouldn't be able to see user traffic on the client machine side because it's encrypted by SSL/TLS. Only way to see/sniff the traffic is on the FGT side before encryption/after decryption.

Toshi

jomofAuthor

New Member

Hello @Toshi,

Thank you for your prompt response is there some kind of cli command I can run to sniff the traffic if so could you please assist.

Only way to see/sniff the traffic is on the FGT side before encryption/after decryption.

Thank you.

Toshi_EsumiAnswer

SuperUser

It depends on your FortiOS version on the FGT if you want to use GUI to sniff. But check this KB:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Packet-Capture-on-FortiOS-GUI/ta-p/194444

If you're ok with CLI, it has't changed almost since the inception of FGT.
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-the-FortiOS-built-in-packet-sniffer/ta-p/194222

Toshi

Sign up

Login with SSO

Login to the community

Login with SSO