This article describes a way to create a report that shows the date and time of connected and disconnected SSL VPN users from FortiGate logs.
Scope
FortiGate with SSL VPN.
Solution
Step 1: Create a report for the date and time of users connected through SSL VPN by downloading the logs from VPN events.
Step 2: Filter with messages: SSL tunnel established & SSL tunnel shutdown.
Step 3: Download the log.
Step 4: Open Excel and create a new spreadsheet.
Step 5: Select the Data tab.
Step 6: Select From Text/CSV.
Step 7: Since the log is in .log instead of .txt file format, select All Files.
Step 8: Select the log file and select Import.
Step 9: Since space is what separates each field in the log file, select Space under Delimiter.
Step 10: Select Load.
Step 11: Proceed in customizing the report and removing fields that are not necessary.
Additional Information:
- A FortiGate local report is not customizable and limited only to bandwidth reports for VPN usage.
- Consider using FortiAnalyzer to generate a VPN report. Refer to VPN report update 7.2.1 and consult local sales if the requirement can be done by customizing a report in FortiAnalyzer.