06-24-2015 11:59 AM
1) How can i get existing user session loging details on the controller.?
2) How many last user session log details i can find on controller?
Solved! Go to Solution.
06-24-2015 12:01 PM
06-24-2015 07:25 PM
We have ClearPass as a radius.
Actually, 3 SSID(EMPL, CORP & GUEST) configured on controller. For guest SSID we have enabled interface NAT(controller IP) & we allowed only http & https traffic for controller IP through Checkpoint firewall.
WIP is not enabled on controller.
Yesterday we got vurnability alert from checkpoint firewall that, source IP (Controller IP) destination (Public IP). But i could not find out actual source IP on the controller.
How can i find out that? if this issue occur again?
06-24-2015 07:29 PM
06-24-2015 09:14 PM
You can get only current user sessions in the controller , for the history for a period of time, you need to use Airwave, if you are using IAP terminating on the Central you can get from Central.
To get the active user sessions, you can use the following command, "show user-table"
Please feel free for any further help on this.
[Is my post helped you ? Give Kudos :) ]