How to create SSLVPN login reports with Syslog GMS/Analytics

Instructions on how to create User login reports for SSLVPN users.

NOTE: Keep in mind, this article only applies to Syslog versions of GMS and Analytics. Flow reporting will not give these options to create such a report.

Step 1:

• A scheduled report can be created by going to Authentication|User Login in GMS or Syslog Analytics
• You should be able to see the SSLVPN logins on this page.  If other services are showing (If you are using LDAP and SSO), click on the service you want to see, by clicking the magnafying glass icon.
• Here we click on the Service of NetExtender
  
• Next, we can click the save icon on the top right of the data showing on that page.
  
• Name the report and click save.
  
• If you go to Custom Reports and you will see your newly named custom report.
  

Step 2:

• Now, If you need to create a scheduled report, you should now have this new custom report available for setting that up.
• Navigate to Console|Reports|Scheduled Reports
• From this page you can click to create a new Scheduled report
  
• The drop down on the right can be helpful in finding the proper firewall if you have many to search through.
• Then select the Firewall or firewalls you will be creating the report for by clicking the play button next to that device.
  
• It will then allow you to select the custom report you created earlier. click next
  
• Give it a cover title
  
• You should then be able to click through to the create button and create the scheduled report.
• You can then test the report by selecting the new report and click "Archive Now" or "Archive for date ranges" options to run the report.
• Once the report has run, you can then check your email or the archive folder to view your report.
• You should be able to see log in and log out activity and their Session duration.