The network proxy/tunnel audit log provides detailed information about connection activity for users who are accessing resources using Connect Tunnel or OnDemand Tunnel, including a list of users and the amount of data transferred.
To view the Network Tunnel Audit log
In the AMC, navigate to Monitoring > Logging.
The View Logs page displays.
Select Network tunnel audit log from the Log file drop-down menu.
The View Logs page displays the information shown in the below table about the network proxy/tunnel audit log file.
Column | Description |
Status |
Displays color-coded connection status for each connection request:
When you move the pointer over a connection status code for a specific log message, AMC displays explanatory text below the message. |
Time | Date and time of the connection. |
Source | Indicates which service generated the message: Network proxy, Network Tunnel, Web proxy, or Policy server. |
Source IP | The IP address and port number of the computer using the network proxy or tunnel service. |
Destination IP | Indicates the IP address and port number of the resource being accessed. |
Bytes |
Shows three sets of values:
|
Username | The user who requested the resource. You can search for all log messages for a specific user by clicking a username link. |
For information on manually reviewing log files from the command-line interface on the appliance, see Network Tunnel Audit Log.