Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 4 subscribers
  • Views 1906 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Find public IP addresses of an SSL VPN user

Constant IT

I'm trying to find out the (historic) source public IP address of a user who has been connecting to the Sophos SSL VPN on a Sophos XTM firewall.
In the firewall logging I can find all the info for this user after he has connected, but the only way I can find the public IP address he connected from is if I can catch the login info in the live firewall log.
Is there any place this is tracked that I am not seeing, or does the firewall not log that info?



This thread was automatically locked due to age.

Top Replies

  • FormerMember
    FormerMember +2 verified

    Hi @Constant IT,

    Thank you for reaching out to the Community! 

    Did you check OpenVPN logs from your UTM? You could also check the "aua" logs and search for the username. 

    Thanks,

    Jump to answer
Parents
  • 0

    Hoi and welcome to the UTM Community!

    As usual, Harsh gives solid answers.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hoi and welcome to the UTM Community!

    As usual, Harsh gives solid answers.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data