Jump to content
Welcome to our new Citrix community!

Citrix user access details report


Recommended Posts

Hi Folks,

 

We have enabled the smart card authentication for our netscaler vpn users and they are accessing the vpn for last 2 years. We would like to know how we can  get the user report from netscaler to know which users were using the smart card based authentication in last 6 months.

 

Awaiting for your valuable reponse.

Link to comment
Share on other sites

It's not built into. AAA events get logged into syslog. So you may grep the syslog. I created a little script to do statistics on ns.log. It's about the WAF (I'm specialised in WAF), but may be a suggestion.

In this case I'd use an external syslog server (greylog, kiwi, ...) and send logs there. You can bind it to the AAA vServer or gateway vServer, so only events related to this vServer get sent there. Unfortunately there are no user configurable log messages with AAA policies, so you can't do this smart kind of logging there :'(

Link to comment
Share on other sites

I send my NetScaler syslog records to Kiwi. You can then use Kiwi's parsing capability to filter on the records you wish (in your case, SSLVPN LOGIN records). Don't let the SSLVPN confuse you. It is the same for all login records. What you are looking for is the SSLVPN_client_type at the end of the record. It is ICA for ICA proxy traffic and Agent for VPN access.

 

Here is an actual VPN syslog record:

Nov 28 12:17:01 <local0.info> 10.x.x.x 11/28/2019:17:17:01 GMT ns 0-PPE-0 : default SSLVPN LOGIN 217333 0 : Context sjacobs@100.x.x.x - SessionId: 75- User sjacobs - Client_ip 100.x.x.x - Nat_ip "Mapped Ip" - Vserver 10.x.x.x:443 - Browser_type "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.171" - SSLVPN_client_type Agent - Group(s) "N/A"

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...