The meaning of the value in the Proxy ID Destination column changes, depending on the configuration of the network at the far end:.A network range may be displayed if the source address in the security encryption policy was expressed as a range of IP addresses. The Proxy ID Source column displays the IP addresses of the hosts, servers, or private networks behind the FortiGate unit.

The time is calculated by subtracting the time elapsed since the last key exchange from the keylife. The Timeout column displays the time before the next key exchange.The Username column displays the peer ID, certificate name, or XAuth user name of the dialup client (if a peer ID, certificate name, or XAuth user name was assigned to the dialup client for authentication purposes).When a FortiGate dialup client establishes a tunnel, the Remote gateway column displays the public IP address and UDP port of the FortiGate dialup client.When a FortiClient dialup client establishes a tunnel, the Remote gateway column displays either the public IP address and UDP port of the remote host device (on which the FortiClient Endpoint Security application is installed), or if a NAT device exists in front of the remote host, the Remote gateway column displays the public IP address and UDP port of the remote host.The meaning of the value in the Remote gateway column changes, depending on the configuration of the network at the far end:.The Name column displays the name of the tunnel.The list of dialup tunnels displays the following statistics: The dialup client must disconnect before another tunnel can be initiated. If you take down an active tunnel while a dialup client such as FortiClient is still connected, FortiClient will continue to show the tunnel connected and idle. To view the list of dialup tunnels go to Monitor > IPsec Monitor. The number of tunnels shown in the list can change as dialup clients connect and disconnect. The list displays the IP addresses of dialup clients and the names of all active tunnels. The list of dialup tunnels provides information about the status of tunnels that have been established for dialup clients. To view the list of static-IP and dynamic-DNS tunnels go to Monitor > IPsec Monitor. You can also start and stop individual tunnels from the list. You can use this list to view status and IP addressing information for each tunnel configuration. The list of tunnels provides information about VPN connections to remote peers that have static IP addresses or domain names. The display provides a list of addresses, proxy IDs, and timeout information for all active tunnels. You can use the monitor to view activity on IPsec VPN tunnels and to start or stop those tunnels. VPN event logs Monitoring VPN connections

The following topics are included in this section: This section provides some general logging and monitoring procedures for VPNs.

Fortinet vpn monitoring