Export VPN user information to FortiAnalyzer

[EGP]

I want to create a dataset on my Fortianalyzer 7.4.6 that shows the following data:

1. Username
2. Group associated with the user
3. User type (Whether local or LDAP)
4. User status (Whether the user is enabled or disabled)
5. Authentication (If it's by email, bring the email associated with that account, or if it's by Fortitoken, bring the token associated with the account)

Last VPN connection I've tried Multiple Script, but it doesn't show any information. Does anyone have a script that can help me generate the requested data? Or how can I get this information from my Fortigate? Sorry for my English.

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Thanks,

[Anthony_E · Accepted solution]

Hello,

To export VPN user information to FortiAnalyzer, follow these steps: 

1. Configure FortiGate to Send Logs: Access the FortiGate CLI. - Configure the FortiGate to send logs to the FortiAnalyzer by specifying the FortiAnalyzer's IP address and the source IP of the FortiGate's internal interface. ```shell config log fortianalyzer setting set status enable set server <FortiAnalyzer_IP> set source-ip <FortiGate_Internal_IP> set upload-option realtime end
2. Ensure VPN Logs are Enabled: Make sure that VPN event logging is enabled on the FortiGate. This can typically be done through the FortiGate GUI under Log & Report settings.
3. Verify Communication:Ensure that the FortiGate and FortiAnalyzer can communicate over the network. This may involve configuring routes and security policies to allow traffic between the devices.
4. View VPN User Information on FortiAnalyzer: On the FortiAnalyzer, navigate to FortiView dashboards. - Use the VPN section to view SSL and Dialup IPsec user information, including connection and disconnection times.

And your English is good :)!

Regards,