Most organizations are moving towards a work culture where employees have the freedom to work from any place they want. For this environment to be successful, many organizations implement a dedicated virtual private network (VPN). However, the very same VPN connections that enable employees to work from remote locations can also lead to a security lapse if not monitored, making VPN traffic monitoring one of the most important functions for any network security administrator. Additionally, from a compliance and auditing perspective, VPN firewall logs need to be stored and analyzed from time to time.
Firewall Analyzer makes it easy for you to track both remote host VPNs (PPTP, L2TP, and IPSEC) and site-to-site VPNs from vendors like Cisco, SonicWall, WatchGuard, and NetScreen. As online VPN log monitoring software, Firewall Analyzer generates the following VPN reports to help track various VPN usage metrics.
1. Top VPN Users report: As the name suggests, this report lists the users connected to your VPN and the amount of traffic they've consumed. This is very handy if you have remote host VPNs configured in your environment.
2. Top Failed VPN Users report: This report tracks the failed connections to your VPN server. Repeat or abnormal failed connections require a closer look to identify possible malicious users trying to compromise your VPN network.
3. Top Protocol Groups report: This report provides an overview of what protocol is used in your VPN network, and offers excellent insights for firewalls that generate application layer protocol information in the VPN logs. This ability to monitor VPN logs across multiple geographical locations is useful in the case of site-to-site VPNs.
4. Group VPN Details report: This report provides VPN usage details for a group of users. These details include number of hits, duration of usage, and total bytes of VPN traffic.
With all of these reports, you can gain end-to-end visibility over your VPN ecosystem and answer the following questions:
Download a 30-day, free trial of Firewall Analyzer and start monitoring your VPN infrastructure.