This topic describes how to monitor endpoint sessions that are currently open via Forefront UAG trunks, using the Web Monitor. It also describes how to query endpoint session statistics.

When a trunk is configured to implement scheduled logoff with a logoff scheme after 60 minutes, a typical session life cycle is as follows:

  1. When a user accesses a Forefront UAG site, an unauthenticated session is established.

  2. After the user authenticates, the session status changes to “authenticated”.

  3. After 60 minutes, the scheduled logoff is triggered. The session status changes to “unauthenticated”, and the user is prompted to reauthenticate.

  4. The user reauthenticates within the required timeframe, and the session status is again set as “authenticated”.

  5. When the user finishes working with the site and logs off, the status of the session changes to “unauthenticated”. After a predefined period of time, the session closes, and it is no longer displayed as an active session in the Web Monitor.

The following procedures describe:

Monitoring all endpoint sessions

To monitor all endpoint sessions

  1. Open the Web Monitor.

  2. To retrieve information about all sessions that are currently open, click Current Status in Session Monitor.

    A column chart displays each trunk in a separate column, and shows the total number of authenticated and unauthenticated sessions that are currently open through the trunk. A table displays the active trunks and open sessions (authenticated and unauthenticated). By default, the window refreshes data every 15 seconds.

  3. To monitor sessions over time, for a selected trunk or all trunks, in the Trunk Name list, next to a specific trunk name, click the icon. You can scroll to the period of time you want to monitor.

    Session behavior is displayed in a line chart, showing both authenticated and unauthenticated sessions and the total number of sessions, at predefined intervals. By default, the window refreshes the data at 10-second intervals.

  4. To receive a detailed snapshot of the sessions currently open for each trunk, click Active Session Monitor. Then, in the active sessions windows, select the trunk from the Trunk list.

    The following session settings for the trunk are displayed:

    • Session ID—Unique session identifier.

    • Lead User—The user who initiated the session.

    • Repository—Authentication server used for user authentication.

    • Started At—Date and time the session started.

    • Duration—Duration of the session.

    • Authenticated—Indicates whether the session is authenticated. A session is unauthenticated if the user's identity is unknown (for example, prior to completion of login) or if the session is suspended before it is closed.

    • Events—Clicking this button generates a report of events related to the session. It is displayed in the event reports window.

    • Terminate—Clicking the Error icon terminates the session. You are prompted to verify the termination. After verifying, the status of the session is changed to unauthenticated. Note that you cannot terminate the current session or unauthenticated sessions.

    By default, the data is refreshed every five minutes.

Monitoring specific endpoint sessions

To monitor a specific endpoint session

  • In the Active Sessions windows, click a session ID.

  • In the Session Details windows, you can monitor the follow information for a session:

    • General information about the session is provided on the General tab. The lead user is the user who initiated the session.

    • All of the applications for which a session user is authorized are displayed on the Applications tab.

    • Information about the client endpoint from which the session originated is displayed on the Endpoint Information tab. This includes information about the IP address and domain of the client endpoint, and also information about Forefront UAG client components and other related software installed on the client endpoint.

    • Session parameters are displayed on the Parameters tab.

Querying endpoint session statistics

The session statistics window enables you to view and analyze both the history and the current status of Forefront UAG sessions, such as the number of concurrent sessions in a trunk. When you first access the window, the query form is displayed. You use the query form to submit a query. Query results are displayed in the statistics window. You can define a query as follows.

To query session statistics

  1. In Session Monitor, click Statistics.

  2. In the Trunks list, select the trunk for which you want to generate the query.

  3. Specify a period of time for the query. You can either select a predefined period or define dates in Start date and End date.

  4. In Interval, define the interval at which the data is sampled. The available intervals depend upon the period of the query. For example, if the selected period is a day, only an Hour interval can be defined; for a period of a week, you can select an interval of either an hour or a day.

    By default, the maximum number of intervals that can be queried is 1,500. A value over 1,500 may slow down the performance of Web Monitor and is not recommended.

  5. In Query Type, select Sample Chart to specify that the number of concurrent sessions is sampled at the end of each interval. Select Peak Chart to specify that the number of concurrent sessions reported is the highest number of sessions that were open during the interval period.

  6. Click Submit to run the query. The results are displayed in the window.

    After you submit a query, when you return to the query form from the query results view, you can click Show last results to display the results of the last query submitted, regardless of any changes you might have made in the query form.

Query results are displayed in accordance with the settings you specified in the query. If query results are available for only part of the defined period, this is also indicated under the Period field. A line chart displays the number of concurrent sessions for each of the trunks in the query. The color that represents each trunk on the chart is indicated in the legend to the left of the trunk name. A table displays information on each of the trunks that were queried. You view the data that is displayed in the chart in a tabular format by clicking the View Chart Data button. Use the paging and zooming controls to focus the view on the period of time you wish to monitor. When you zoom out to the smallest view, the window displays the entire period that is queried, up to the predefined interval limit. When you zoom in to the largest view, the window displays 10 intervals; to view additional intervals, use the paging controls. Click Show query form to return to the query form.

The query results include the following:

  • Trunk—Indicates the trunk name.

  • Concurrent sessions—Minimum and maximum number of sessions concurrently open through the trunk during the query period.

  • Duration—Average and maximum duration of sessions open through the trunk during the query period. If the number of results exceeds the value specified in Max Report Results, duration is not reported.

  • Concurrent Sessions Settings—Settings that are defined in the Session tab of the trunk properties. Threshold indicates the threshold above which each new session that opens generates a report, as defined in the Concurrent Sessions Threshold value in the Session tab. Limit indicates the maximum number of sessions that can be open through the trunk at the same time, as defined in the Max Concurrent Sessions value in the Session tab.

  • View—Clicking the View button adds the display of concurrent sessions threshold and limit to the chart; clicking the Hide Limit button removes the display from the chart.