How can I view the log in info (if any) of a recently deleted vpn ssl user?

Options
Almanetworks
Almanetworks Posts: 1
First Anniversary
edited April 2021 in Security
My customer's firewal is a usg60. Recently (2 days ago) I was asked to delete a vpn ssl user. Today they asked me to find out the activity of the deleted user. When was the last time they connected through secuextender, what was the duration of the connection etc.
Could you please help me find out all these details?
Thank you in advance!

All Replies

  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    Friend Collector First Answer First Comment
    Options

    Hi @Almanetworks,

     

    Did you check Monitor > Logs menu?

     

    For that you can check the Monitor > Log >  View Log menu. Please choose SSL VPN as category.



    In this case, I used to connect with user1, then I deleted user1 from Users.

    But we can still see the logs for deleted users.


    If the log was already cleared, you will need a sys log server or USB flash disk to save the logs.

     

    Best regards.


Security Highlight