H3C Technologies H3C SecCenter Firewall Manager - Manual (Page 122)

116
SSL VPN auditing
As Virtual Private Network (VPN) is much cheaper and more flexible to use than leased lines, more and
more companies are establishing VPNs over public networks such as the Internet, so as to allow
employees working at home or traveling on business, employees of branch offices, and partners to
access the internal networks. SSL VPN is an emerging VPN technology, and has been widely used for
secure remote web-based access. For example, it can allow remote users to access the corporate network
securely.
The SSL VPN auditing component supports analyzing and auditing operations of SSL VPN users. It also
provides realtime monitoring of online users and history records, helping you understand SSL VPN usage
and the network security.
To access the SSL VPN auditing component, select the SSL VPN Auditing tab. Then, you can perform:
• Comprehensive analysis
• SSL VPN log auditing
Comprehensive analysis
The comprehensive analysis function provides information of online users, online user trend, daily user
statistics and device monitoring for you to understand what SSL VPN users have done during their access
to the internal network. You can export and save the reports as an Excel file.
Online users
The online user statistics function displays the SSL VPN users that are currently accessing the internal
network. This list presents the username, user IP address, virtual IP address, login time, online duration,
operation that the user has performed, and resources the user has accessed. It also supports flexible
online user query.
Configuration guide
From the navigation tree of the SSL VPN auditing component, select Online Users under Comprehensive
Analysis to enter the online user list page, as shown in Figure 118 .
Figure 118 Online user list