SSL VPN SSL VPN monitor list
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 649
http://docs.fortinet.com/ • Feedback
SSL VPN monitor list
You can view a list of all active SSL VPN sessions. The list displays the user name of the
remote user, the IP address of the remote client, and the time the connection was made.
You can also see which services are being provided, and delete an active web or tunnel
session from the FortiGate unit. For more information, see “SSL VPN” on page 633.
To view the list of active SLS VPN sessions, go to VPN > SSL > Monitor.
Figure 399: SSL VPN monitor list
GUID Enter the globally unique identifier (GUID) for the host check application. The
GUID is usually in the form xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx, where each x
is a hexadecimal digit. Windows uses GUIDs to identify applications in the
Windows Registry.
Add button If you do not know the GUID, add alternative checks for the application. The host
check software is considered found only if all checks succeed.
Check Item entry
Type Select how to check for the application:
• File — Look for a file. This could be the application’s executable file or any
other file that would confirm the presence of the application. In File/Path,
enter the full path to the file. Where applicable, you can use environment
variables enclosed in percent (%) marks. For example,
%ProgramFiles%\Fortinet\FortiClient\FortiClient.exe.
• Process — Look for the application as a running process. In Process, enter
the application’s executable file name.
• Registry — Search for a Windows Registry entry. In Registry, enter a registry
item, for example HKLM\SOFTWARE\Fortinet\FortiClient\Misc.
Action Select one of
Require — If the item is found, the client meets the check item condition.
Deny — If the item is found, the client is considered to not meet the check item
condition. Use this option if it is necessary to prevent use of a particular security
product.
MD5 Signatures If Type is File or Process, enter one or more known MD5 signatures for the
application executable file.You can use a third-party utility to calculate MD5
signatures or hashes for any file. You can enter multiple signatures to match
multiple versions of the application.
No. The connection identifiers.
User The user names of all connected remote users.
Source IP The IP addresses of the host devices connected to the FortiGate unit.
Begin Time The starting time of each connection.
Description For an SSL VPN tunnel subsession, the client’s assigned tunnel IP
address is shown.
Action Select action to apply to current SSL VPN tunnel session or
subsession.
Delete icon Delete the current session or subsession.