Skip to main content
DirkDuesentrieb
New Member
May 25, 2020
Question

Many User VPNs with duration=47088236

  • May 25, 2020
  • 0 replies
  • 1527 views

Hi,

we see strange tunnel-stats of remote access VPNs that might point to an issue. There are some complaints coming from users about stale tunnels, but because of the current situation there is too much happening at the same time to correlate things.

 

The funny logs look like this (without unimportant stuff):

[ul]
  • action=tunnel-stats
  • tunnelid=0
  • tunneltype=ipsec
  • duration=47088236
  • sentbyte=0
  • rcvdbyte=0[/ul]

     

    Has anyone seen this as well?

     

    Cheers,

    Dirk

  • Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.