Description
This article describes how to check a user's Public IP address when it is connected to an SSL VPN using an SSL VPN Tunnel IP address or username.
Scope
FortiGate.
Solution
Enter the command 'get vpn ssl monitor'. It is also possible to filter using grep with Tunnel IP address or username.
get vpn ssl monitor
SSL-VPN Login Users:
Index User Group Auth Type Timeout Auth-Timeout From HTTP in/out HTTPS in/out Two-factor Auth
0 nathan 1(1) 293 28772 198.18.0.177 0/0 0/0 0
SSL-VPN sessions:
Index User Group Source IP Duration I/O Bytes Tunnel/Dest IP
0 nathan 198.18.0.177 28 9888/0 10.212.134.200
Filter using username:
get vpn ssl monitor | grep nathan
0 nathan 1(1) 288 28767 198.18.0.177 0/0 0/0 0
0 nathan 198.18.0.177 33 9888/0 10.212.134.200
Filter using Tunnel IP address:
get vpn ssl monitor | grep 10.212.134.200
0 nathan 198.18.0.177 42 11092/0 10.212.134.200
It is also possible to check it on VPN Event logs. Right on the Columns and then Select Columns (Remote IP, User).
