Firewall Users monitor
The Firewall Users monitor displays all currently logged in firewall and proxy users. You can use the monitor to diagnose user-related logons or to highlight and deauthenticate a user.
To view the firewall monitor:
-
Go to Dashboard > Assets & Identities.
-
Hover over the Firewall Users widget, and click Expand to Full Screen.
If you are using the Comprehensive dashboard template, go to Firewall User Monitor.
-
To show FSSO logons, click Show all FSSO Logons at the top right of the page.
-
To switch to the proxy user view, click Proxy (next to the search bar). Proxy user view shows used that authenticated over ZTNA and explicit proxy.
To filter or configure a column in the table, hover over the column heading and click the Filter/Configure Column button. |
When the number of users exceeds 2000, the page no longer displays the search bar, filter columns, or graphs because lazily-loaded results do not support these GUI features. |
To deauthenticate a user in the GUI:
-
Go to Dashboard > Assets & Identities.
-
Hover over the Firewall Users widget, and click Expand to Full Screen.
-
(Optional) Use the Search field to search for a specific user.
-
In the toolbar, click Deauthenticate, or right-click the user, and click Deauthenticate. The Confirm dialog is displayed.
-
Click OK.
To view and deauthenticate firewall users in the CLI:
# diagnose firewall auth list # diagnose firewall auth filter <parameters> # diagnose firewall auth clear
To view and deauthenticate proxy users in the CLI:
# diagnose wad user list # diagnose wad user clear <ID> <IP|IPv6> <VDOM>
or
# diagnose wad user clear