VPN User Report NSF-3100A-I ?

net_specialist Lv2Posted 2026-Apr-24 07:02

How to check user activity in VPN NSF-3100A-I ?

Muhammad Abid has solved this question and earned 20 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

To check VPN user activity on a Sangfor NSF-3100A-I, you’ll use the built-in logging and reporting features (SSL VPN / IPsec VPN logs).

Method 1: Check Real-Time Online Users
Login to the firewall web interface
Go to:
VPN → SSL VPN → Online Users
Here you can see:
Username
Assigned IP
Login time
Connection duration
Data usage (Tx/Rx)

Method 2: Check VPN Logs (Historical Activity)
Navigate to:
Log Center → VPN Logs (or User Logs depending on firmware)
Filter by:
Username
Time range
IP address
You can view:
Login / logout events
Session duration
Source public IP
Traffic usage

Method 3: User Behavior / Traffic Monitoring
Go to:
Monitor → User Activity / Traffic Statistics
Select the VPN user
You’ll get:
Websites accessed
Applications used
Bandwidth consumption

Method 4: Generate Reports
Go to:
Report Center → VPN Report / User Report
Generate reports like:
Top VPN users
Usage trends
Session history

Pro Tip
Make sure logging is enabled for VPN and user activity, otherwise history won’t be available.
You can also export logs (CSV/PDF) for audit or compliance.
Is this answer helpful?
Muhammad Abid Lv3Posted 2026-Apr-24 12:17
  
To check VPN user activity on a Sangfor NSF-3100A-I, you’ll use the built-in logging and reporting features (SSL VPN / IPsec VPN logs).

Method 1: Check Real-Time Online Users
Login to the firewall web interface
Go to:
VPN → SSL VPN → Online Users
Here you can see:
Username
Assigned IP
Login time
Connection duration
Data usage (Tx/Rx)

Method 2: Check VPN Logs (Historical Activity)
Navigate to:
Log Center → VPN Logs (or User Logs depending on firmware)
Filter by:
Username
Time range
IP address
You can view:
Login / logout events
Session duration
Source public IP
Traffic usage

Method 3: User Behavior / Traffic Monitoring
Go to:
Monitor → User Activity / Traffic Statistics
Select the VPN user
You’ll get:
Websites accessed
Applications used
Bandwidth consumption

Method 4: Generate Reports
Go to:
Report Center → VPN Report / User Report
Generate reports like:
Top VPN users
Usage trends
Session history

Pro Tip
Make sure logging is enabled for VPN and user activity, otherwise history won’t be available.
You can also export logs (CSV/PDF) for audit or compliance.
Damai_Group Lv2Posted 2026-Apr-24 17:31
  
Hello Net Specialist!!


Here are the most effective ways to monitor VPN user activity on your Sangfor NSF-3100A-I:

View SSL VPN Access Logs
This is the most direct method to see who connected, when, and what they accessed:
1. Ensure Logging is Enabled: First, confirm the device is collecting the necessary data. Navigate to Monitor > Settings > Logging Options and verify that "SSL VPN Logs" is enabled and storage is set to "Local". For long-term storage and analysis, it is also recommended to configure a remote Syslog server.
2. Access the Logs: Go to Monitor > Logs > Access Logs > SSL VPN Logs.
3. Refine Your Search: Use the available filters to search by a specific username, IP address, or action (login, logout, etc.).
4. Review the Results: The log will display detailed records, including the user, their IP address, login/logout timestamps, and the specific resources they accessed.

Note for Older Firmware (below 8.0.17): If your device is on this version, you will need to enable logging and then access the logs via the Internal Report Center. Upgrading to the latest firmware is highly recommended for better features and performance.

Check Other Relevant Logs & Reports
- System/Process Logs for Troubleshooting: For diagnosing connection issues, go to System > Troubleshooting > Logs. Here you can filter by specific processes like "SSLVPN" to see connection attempts and errors.
- Active User List: To see who is currently connected, navigate to Security > User Mgmt > Active User List.
- Security & Custom Reports: You can generate more detailed reports by going to Log & Report > Custom Report. This allows you to create tailored reports including fields like "User Name" and "Last Activity Time". Some third-party solutions, like ManageEngine Log360, can also create specialized VPN activity reports.

Important Preliminary Steps
If you do not see any VPN logs, make sure that:
- The logging feature is enabled as a whole.
- The correct "Log Location" (Local or Syslog) is configured.
- Any Syslog server configuration is correct if you are using one.

References:
- Sangfor NGAF Syslog Configuration Guide: https://knowledgebase.sangfor.com/",with keyword :"Sangfor_NGAF_V8.0.5 Syslog Configuration Guide"
- How to view SSL VPN usage logs on Sangfor NGAF/NSF: https://support.thailand.sangfor.com/hc/th/articles/900000699343-วิธีดู-log-การใช-งานของ-SSLVPN
- How to view System Log (Process Log) on Athena NGFW (NGAF/NSF): https://support.thailand.sangfor ... cles/7670993867417-วิธีดู-System-Log-Process-Log-บน-Athena-NGFW-NGAF-NSF
- Sangfor Community: User Activity Logs and Inactive Users Tracing: https://community.sangfor.com/fo ... page=1&tid=9808
Achmad Tegar S Lv1Posted 2026-Apr-24 20:16
  
You can check vpn user activity at monitor >access logs > ssl vpn logs

I Can Help:

Change

Moderator on This Board

1
152
3

Started Topics

Followers

Follow

1007
208
99

Started Topics

Followers

Follow

Board Leaders