Authentication Logs

This section provides you with the tools to view and generate user authentication reports for user login/logout, admin login/logout and failed login reports. You can access the authentication logs by navigating to Monitor > Logs > Authentication Logs page.

 

• You need to have NSM Advanced Reporting and Analytics license to view and manage Authentication Logs.
• Authentication Logs are available for all GEN6, Gen7, and GEN8 firewalls. You can refer the Release Notes to learn more about the build information.

• User Login: This tab provides all the login/logout information of the user.
• Admin Login: This tab provides all the login/logout information of the administrator of a firewall.
• Failed Login: This tab provides all the information regarding the failed login attempt of both the user and the administrator.
• The report columns include information such as Time, Initiator IP, User, Initiator/Destination Interface, Initiator/Destination Port, Session Time, Service and Message

You can use the Search button to search the information of an user. You have a Time Range option that lets you customize the time duration of the report. The Limit drop down is used to set the limit of the number of users. You can further filter the table according to a specific time by using the Time Slider which is present above the graph.

You have the option to create Customized Filters as per your requirements for the initiator IP and the user columns as well as create Custom Reports. You can also click on Refresh button to refresh the information on the page, edit the columns in the table by the Column Selection button and export the table in PDF/CSV format using the Export button.

Admin Login:

User Login:

Failed Login: