Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 28 subscribers
  • Views 879 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

traffic counters live users

apijnappels

When I look in live users overview in XG, I can see increasing traffic on each SSL VPN-connection user, but counters for users in the internal network stay 0 while they do seem to be authenticated.

It's hardly imaginable that these users are not at all connecting to the internet, not in the first place for management traffic from AD.

Is there some setting that I need to enable for these internal LAN counters to increase?



This thread was automatically locked due to age.
Parents
  • 0

    Can you show us a screenshot of those users? Are those Clientless users? 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0 in reply to apijnappels

    Seems like there is no packets going to XG.

    Seeing that there are different IP subnets, is XG the default gateway? 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Yes, 10.242.12.0/24 are SSL VPN users working from home. Their data is counted

    192.168.21.0/24 is local subnet and this data is not counted. XG is the only firewall and default gateway for every system. It is highly unlikely that no traffic is passing the XG. We have some agents on all our systems that are continuously connecting to online services, users are using mail, browsing the web etc.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Reply
  • 0 in reply to LuCar Toni

    Yes, 10.242.12.0/24 are SSL VPN users working from home. Their data is counted

    192.168.21.0/24 is local subnet and this data is not counted. XG is the only firewall and default gateway for every system. It is highly unlikely that no traffic is passing the XG. We have some agents on all our systems that are continuously connecting to online services, users are using mail, browsing the web etc.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Children
No Data
Cookie Information Banner