This program is written for Fortigate firewalls to display connected SSL VPN users in a systematized manner.

• Query multiple firewalls (specified in yaml file)
• Helps you find users who are possibly sharing their account credentials
• Be aware of your IP assignments and address pool depletion
• Possibly find SSL VPN daemon issues of FortiOS
• Cross-platform. Runs on Windows, Linux and Mac OS.

Netmiko is needed to run this script. You can install it using below command.

pip3 install netmiko

Download all the files in this repository and place them in the same directory. Alternatively, you can clone this repository as well.

git clone https://github.com/pouriyajamshidi/FortiSSLVPNMonitor.git

Populate the firewalls.yaml according to your environment:

• name: Firewall name
• mgmt_ip: management IP address
• port: SSH port
• vdom: Vdom name, in case you are not using any, set it as none
• ip_pool: IP address pool size for VPN users. E.g. 254 for /24

• For FortiOS versions below 6.4:

  python3 pysslvpnmonitor_below_6.4.py

• For FortiOS versions 6.4 and above:

  python3 pysslvpnmonitor.py

Windows and Debian derivatives.

Pull requests are welcome.