Inactive Users Tracing

We have allowed internet few hundred LAN users internet via there MAC addressess. They are created under

"Access Mgt > User Management > User Binding". Also by policy we have set to remove any active session (online users) at 5am daily for security purposes.

How can we track for inactive users who have not logged in / inactive internet users , or there last logged in date?

try utilizing user bindings information

- check if your "User Binding" records in Access MGT>User Management> offer "Last USed" or similar attributes. this could show the last time a specific MAC address accessed the internet
- analyze your fw or access control logs for sessions initiated by MAC addresses within "User Binding". you can also filter logs based on forced logout time

Hi, to track inactive users in Sangfor IAG (Internet Access Gateway), follow these steps:

User Management:
Users are created under “Access Mgt > User Management > User Binding”.
By policy, active sessions (online users) are removed daily at 5 am for security purposes.

Inactive Users Tracing:
To identify inactive users who have not logged in or are inactive internet users, consider the following approaches:
Reporting Center: Sangfor IAG provides an advanced reporting center that allows you to analyze user internet access behavior.
Query Last Logged-In Date: You can query the last logged-in date for each user to determine their activity status.
Scheduled Reports: Set up scheduled reports to receive notifications about inactive users.
Custom Scripts: If needed, create custom scripts using APIs to automate tracking and alerting for inactive users.

Remember to tailor these steps based on your specific requirements and operational needs. If you encounter any issues or need further assistance, consult Sangfor’s documentation or seek support from their team

Examine logs on your network devices such as routers, switches, or firewalls to see if there are any records of user logins or activity. The specific procedure for checking logs will depend on the equipment you're using.

Employ network monitoring tools that can provide detailed insights into user activities. Tools like Wireshark, Nagios, or SolarWinds can help monitor network traffic and identify users who have been inactive.

DHCP (Dynamic Host Configuration Protocol) logs can provide information about IP address assignments to devices on your network. You can review these logs to identify devices that have not requested an IP address recently.

If your network is integrated with Active Directory or LDAP, you can query user login information. Tools like PowerShell or LDAP queries can be used to retrieve last login times.

Since you mentioned that users are managed under "Access Mgt > User Management > User Binding," check the access management system for logs or reports on user logins and activities.

Network Access Control solutions often provide insights into user activities and can help identify inactive users. Check the reporting features of your NAC solution.

If you have a proxy server in your network, review its logs to see user activities. Proxy logs can provide information about which users accessed the internet and when.