Technical Tip: Make a report that shows date and time of connected SSL VPN users

[candawi]

Description

This article describes a way to create a report that shows the date and time of connected and disconnected SSL VPN users from FortiGate logs.

Scope

FortiGate with SSL VPN.

Solution

1. Create a report for the date and time of users connected through SSL VPN by downloading the logs from VPN events. Refer to this guide for obtaining the logs: Technical Tip: View historic SSL VPN user connectivity logs.
   
   
2. Filter with messages: SSL tunnel established & SSL tunnel shutdown.
   
   

3. Download the log.
   
   

   

4. Open Excel and create a new spreadsheet. 

5. Select the Data tab.

6. Select From Text/CSV.

7. Since the log is in .log instead of .txt file format, select All Files.
   
   

   

8. Select the log file and select Import.

9. Since space is what separates each field in the log file, select Space under Delimiter.
   
   

   
   

10. Select Load.

11. Proceed in customizing the report and removing fields that are not necessary. 
    
    

    

Additional Information:

• A FortiGate local report is not customizable and limited only to bandwidth reports for VPN usage.
• Consider using FortiAnalyzer to generate a VPN report. Refer to VPN report update 7.2.1 and consult local sales if the requirement can be done by customizing a report in FortiAnalyzer.

Related articles:

Technical Tip: Local Reports

Technical Tip: How to build a custom report on FortiAnalyzer using Chart Builder