Hey all,
Im curious, whether I misunderstand the concept of Live and Remote Users.
I got an appliance with both SSL and IP Sec Client VPN. Only users of the SSL VPN are shown as "remote users".
At least my head thought, that IP Sec Users should also appear in the Remote User Section. But I'm not 100% sure, whether this was on 18.5.x
Also - the documentation mentions several client types for Live Users - but no modes for Remote Users. What Modes can Remote Users have?
Hello TheMonzelThank you for reaching out to the community, I believe the all the remote access vpn as such SSL, PPTP & L2TP will be under the Remote users.Also for the user portal as well, if someone is active on the user portal:I have already requested internally doc team to update a table like we have for the client type !
Thanks & Regards,_______________________________________________________________
Vivek Jagad | Technical Account Manager 3 | Cyber Security Evolved
Sophos Community | Product Documentation | Sophos Techvids | SMSIf a post solves your question please use the 'Verify Answer' button.
Yes, i thought I saw users without an SSL VPN in that section
So IP Sec Users (connected with Sophos Connect - not Site to Site) should be displayed as well, right? I will see, maybe I got time to create an support ticket for this and they can have a look why they don't show up.
Yes all the remote access should be, as highlighted below:
Case ID is 05669298
TheMonzel said:I got an appliance with both SSL and IP Sec Client VPN. Only users of the SSL VPN are shown as "remote users".
If you would like to see IPSec VPN (Remote user) you can see them under Current activities > IPsec connections.
For SSL VPN users like you said it is under Current activities > Remote users.
From Control Central "Connected Remote users" means number of users connected with SSL VPN only not for IPSec VPN or /L2TP/PPTP VPN you have to check under Current activities > IPsec connections which are not available on Control central separately they are included under live user on GUI.
Thanks and Regards
"Sophos Partner: Infrassist Technologies Pvt Ltd".
If a post solves your question please use the 'Verify Answer' button.
I am aware of that - but IPSec Connections also shows Site to Site Connections. And IPSec Connections are showing all dedicated connections for each subnet - so there could be several records per user.
I think the number of remote users is misleading, if IPSec Users does not count. Even more as all of them are part of the Remote Access Section in v19.
Essentially Remote Users are "not that important".
Firewall and other modules fully use Live Users.
So therefore Remote Users are actually something i did not look in many moons. Any particular thing you are looking for?
__________________________________________________________________________________________________________________
LuCar Toni said:So therefore Remote Users are actually something i did not look in many moons.
Same here
TheMonzel said:I think the number of remote users is misleading, if IPSec Users does not count. Even more as all of them are part of the Remote Access Section in v19.
It was nothing more than this confusion I really noticed this for the first time this morning and wondered where my 120 IPSec users had gone to
Hi TheMonzel
I understand your confusion, the count is misleading from GUI and also later from MONITOR & ANALYZE-->Current activities for remote SSL VPN and IPSec VPN connections, where a manual filter is required to check the exact status of connected users with IPSec VPN connection name, I would like to suggest you to put a vote that remote SSL VPN and IPSec VPN users show separately on GUI on Feedback available on from Sophos GUI.
Doc Team, has finally updated the list of client type for remote users TheMonzel - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/CurrentActivities/SSLVPNLiveUsersManage/index.html