XGS - SSL VPN connection duration

Question

Sophos XGS (SFOS 20.0.1 MR-1-Build342) 
 Is it possible to know the total time user has been connected to the vpn as I can only get the authentication and data transferred.

LHerzog · Answer

you can create your own report from the live logs from login and disconnect times. 
 
 also you can import that as CSV in excel. 
 Also in Reports you can filter Auth events. 
 But I'm not aware if a bulid-in report exists for SSL VPN duration. I also see no need for such a report.

LuCar Toni · Answer

You could also check CFR (Central Firewall Reporting). It includes a Connection time report.

LHerzog · Answer

ah, that was, what you asked for but the logout time can be seen also from the authentication events. all in all this would be only useful to track down a login/logout events for a few users, nothing to automate. 
 2024-09-19 13:44:34,Firewall Authentication,Information,User xxx@xxx.de was logged out of firewall 
 that can also be pulled from central logging. 
 
 you can assume that if the User IP address is from your VPN Range and see a logout, that this is the termination of the VPN Session

Erick Jan · Answer

Hi, 
 Thank you for reaching out to Sophos Community. 
 Kindly check SSL VPN reports by navigating to Reports > VPN, filter Show: SSL VPN > View all. 
 You may check the following Older post for a similar query 
 
 Time log for SSL VPN connection users. 
 
 Or you may also check Central Firewall Reporting. It&rsquo;ll log the duration of each Session.

XGS - SSL VPN connection duration

Top Replies