Active Sessions

Prev Next

The active sessions list summarizes the current users within the Collective. The active sessions list shows a number of columns to allow filtering and sorting.

Filtering and sorting

The search box can be used to filter the view; so to list just see service users you could search for 'service'. Most columns are sortable - just click on a column heading and sort arrow(s) will appear.

Viewing specific sessions

Click on any row to access specific session details.

Action Buttons

Action buttons are accessed by clicking the three dots to the right of each line item in the table or from the <Actions> button within the item. They are contextual, changing depending on the type of item and the state of the item.

  • Analyze Policy Assignments. Runs a simulation of the Policy assignment process using the user's currently reported Claims. This will allow you to see which Policies are being applied as well as the resulting device settings - which may come from a number of different policies.

  • Download Client Logs. Triggers a log bundle download from the device being used. Requires Client v6.1 or later. This will download a zip archive of the user's Client logs.

  • Renew Tokens. Will refresh the tokens for this device. This might be used to push an Entitlement update to a user's device. It is possible to use bulk actions on Active Sessions to Renew Tokens. This can also be done from Registered Devices.

  • Blacklist User. Removes access from all devices for this user by revoking all related tokens and adds them to the blacklist preventing them from signing in again. This can also be done from Registered Devices.

Session details

Shows session details for the selected user/device and provides additional details for the selected Site.

Actions

The <Actions> dropdown within the session details can perform the same operations as the Action Buttons described above.

General details

The top of the session details includes a set of fixed non-Site-specific details about the chosen session, and may include warnings such as:

IP address conflicts

Appgate SDP routes traffic to multiple Sites simultaneously - so it is important to avoid having the same IP address appear on multiple Sites. If a conflict detected then a message detailing the offending Sites will be identified so remedial action can be taken.

Session details showing resolved IP addresses and a warning about having the same IP subnet on multiple Sites.

Unreachable Protected Hosts

When there are Unreachable Protected Hosts reported, then more details can be obtained from the App Health Reports page.

Site specific details

Select Site

The user may be connected to multiple Sites. The 7 additional details tabs display the information for only the Site chosen.

List of entitlements for the Gothenburg site, showing other Sites the user is connected to.

NOTE

During failover or Client reconnection (moving from one Gateway to another) both Gateways may report that the same user is attached.This will resolve itself within 5 minutes.

Entitlements

The Entitlements shown are those which are allowed by the Policies.

Entitlements page showing access status for various servers and conditions listed.

Entitlements show:

  • if access is allowed or not

  • any Conditions - the color indicates indicates if condition is currently met or not

  • the matched Policies which allowed this Entitlement

  • the Actions relating to that Entitlement including:

    • name, ports and hosts

    • action number within the Entitlement (which also appears in the IP access audit logs).

System Claims

The current claim values being used for the user's session. The appendix contains more information about Claims in detail.

User Claims

The current claim values being used for the user's session. The appendix contains more information about Claims in detail.

Device Claims

The current claim values being used for the user's session. The appendix contains more information about Claims in detail.

Gateway Stats

Detailed statistics from the Gateway for the user's session such as the total bytes read and written through the VPN daemon servicing this user.

Session Stats

Details about the session's connection (to this Gateway).

  • Connected for - the connection to this Gateway

  • Connection Attempts - the number of tries to connect to this Site including this try (normally this will be 1).