Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 987 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect - Where to view client's WAN IP address in logs?

ken9000

Hello. After a Sophos Connect connection we can view the assigned local DHCP address for the client but we cannot seem to find where in the logs the WAN IP address (where in the world they are connecting from) of the client. Where is that viewable? We need to feed this into our SIEM.



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    As mentioned by  you should see the user's public IP address from the log viewer's authentication logs or search the user name in access_server logs and see the remote user's public IP address. 

    You can run the following command from the Advanced shell: grep -i "user name" /log/access_server.log

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    As mentioned by  you should see the user's public IP address from the log viewer's authentication logs or search the user name in access_server logs and see the remote user's public IP address. 

    You can run the following command from the Advanced shell: grep -i "user name" /log/access_server.log

    Thanks,

Children
No Data