Skip to Content

How to make a report that shows date and time of connected SSL VPN users

This article describes a way to create a report that shows the date and time of connected and disconnected SSL VPN users from FortiGate logs.

Scope

FortiGate with SSL VPN.

Solution

Step 1: Create a report for the date and time of users connected through SSL VPN by downloading the logs from VPN events.

Step 2: Filter with messages: SSL tunnel established & SSL tunnel shutdown.

Filter with messages: SSL tunnel established & SSL tunnel shutdown.

Step 3: Download the log.

Download the log.

Step 4: Open Excel and create a new spreadsheet.

Step 5: Select the Data tab.

Step 6: Select From Text/CSV.

Step 7: Since the log is in .log instead of .txt file format, select All Files.

Since the log is in .log instead of .txt file format, select All Files.

Step 8: Select the log file and select Import.

Step 9: Since space is what separates each field in the log file, select Space under Delimiter.

Since space is what separates each field in the log file, select Space under Delimiter.

Step 10: Select Load.

Step 11: Proceed in customizing the report and removing fields that are not necessary.

Proceed in customizing the report and removing fields that are not necessary.

Additional Information:

  • A FortiGate local report is not customizable and limited only to bandwidth reports for VPN usage.
  • Consider using FortiAnalyzer to generate a VPN report. Refer to VPN report update 7.2.1 and consult local sales if the requirement can be done by customizing a report in FortiAnalyzer.