This topic describes how to monitor endpoint sessions that are currently open via Forefront UAG trunks, using the Web Monitor. It also describes how to query endpoint session statistics.
When a trunk is configured to implement scheduled logoff with a logoff scheme after 60 minutes, a typical session life cycle is as follows:
- When a user accesses a Forefront UAG site, an unauthenticated
session is established.
- After the user authenticates, the session status changes to
- After 60 minutes, the scheduled logoff is triggered. The
session status changes to “unauthenticated”, and the user is
prompted to reauthenticate.
- The user reauthenticates within the required timeframe, and the
session status is again set as “authenticated”.
- When the user finishes working with the site and logs off, the
status of the session changes to “unauthenticated”. After a
predefined period of time, the session closes, and it is no longer
displayed as an active session in the Web Monitor.
The following procedures describe:
- Monitoring all
specific endpoint sessions
endpoint session statistics
Monitoring all endpoint sessions
To monitor all endpoint sessions
Open the Web Monitor.
To retrieve information about all sessions that are currently open, click Current Status in Session Monitor.
A column chart displays each trunk in a separate column, and shows the total number of authenticated and unauthenticated sessions that are currently open through the trunk. A table displays the active trunks and open sessions (authenticated and unauthenticated). By default, the window refreshes data every 15 seconds.
To monitor sessions over time, for a selected trunk or all trunks, in the Trunk Name list, next to a specific trunk name, click the icon. You can scroll to the period of time you want to monitor.
Session behavior is displayed in a line chart, showing both authenticated and unauthenticated sessions and the total number of sessions, at predefined intervals. By default, the window refreshes the data at 10-second intervals.
To receive a detailed snapshot of the sessions currently open for each trunk, click Active Session Monitor. Then, in the active sessions windows, select the trunk from the Trunk list.
The following session settings for the trunk are displayed:
- Session ID—Unique session
- Lead User—The user who initiated the
- Repository—Authentication server used
for user authentication.
- Started At—Date and time the session
- Duration—Duration of the session.
- Authenticated—Indicates whether the
session is authenticated. A session is unauthenticated if the
user's identity is unknown (for example, prior to completion of
login) or if the session is suspended before it is closed.
- Events—Clicking this button generates
a report of events related to the session. It is displayed in the
event reports window.
- Terminate—Clicking the Error icon
terminates the session. You are prompted to verify the termination.
After verifying, the status of the session is changed to
unauthenticated. Note that you cannot terminate the current session
or unauthenticated sessions.
By default, the data is refreshed every five minutes.
- Session ID—Unique session identifier.
Monitoring specific endpoint sessions
To monitor a specific endpoint session
In the Active Sessions windows, click a session ID.
In the Session Details windows, you can monitor the follow information for a session:
- General information about the session is
provided on the General tab. The lead user is the user who
initiated the session.
- All of the applications for which a session
user is authorized are displayed on the Applications
- Information about the client endpoint from
which the session originated is displayed on the Endpoint
Information tab. This includes information about the IP address
and domain of the client endpoint, and also information about
Forefront UAG client components and other related software
installed on the client endpoint.
- Session parameters are displayed on the
- General information about the session is provided on the General tab. The lead user is the user who initiated the session.
Querying endpoint session statistics
The session statistics window enables you to view and analyze both the history and the current status of Forefront UAG sessions, such as the number of concurrent sessions in a trunk. When you first access the window, the query form is displayed. You use the query form to submit a query. Query results are displayed in the statistics window. You can define a query as follows.
To query session statistics
In Session Monitor, click Statistics.
In the Trunks list, select the trunk for which you want to generate the query.
Specify a period of time for the query. You can either select a predefined period or define dates in Start date and End date.
In Interval, define the interval at which the data is sampled. The available intervals depend upon the period of the query. For example, if the selected period is a day, only an Hour interval can be defined; for a period of a week, you can select an interval of either an hour or a day.
By default, the maximum number of intervals that can be queried is 1,500. A value over 1,500 may slow down the performance of Web Monitor and is not recommended.
In Query Type, select Sample Chart to specify that the number of concurrent sessions is sampled at the end of each interval. Select Peak Chart to specify that the number of concurrent sessions reported is the highest number of sessions that were open during the interval period.
Click Submit to run the query. The results are displayed in the window.
After you submit a query, when you return to the query form from the query results view, you can click Show last results to display the results of the last query submitted, regardless of any changes you might have made in the query form.
Query results are displayed in accordance with the settings you specified in the query. If query results are available for only part of the defined period, this is also indicated under the Period field. A line chart displays the number of concurrent sessions for each of the trunks in the query. The color that represents each trunk on the chart is indicated in the legend to the left of the trunk name. A table displays information on each of the trunks that were queried. You view the data that is displayed in the chart in a tabular format by clicking the View Chart Data button. Use the paging and zooming controls to focus the view on the period of time you wish to monitor. When you zoom out to the smallest view, the window displays the entire period that is queried, up to the predefined interval limit. When you zoom in to the largest view, the window displays 10 intervals; to view additional intervals, use the paging controls. Click Show query form to return to the query form.
The query results include the following:
- Trunk—Indicates the trunk name.
- Concurrent sessions—Minimum and
maximum number of sessions concurrently open through the trunk
during the query period.
- Duration—Average and maximum duration
of sessions open through the trunk during the query period. If the
number of results exceeds the value specified in Max Report
Results, duration is not reported.
- Concurrent Sessions Settings—Settings
that are defined in the Session tab of the trunk properties.
Threshold indicates the threshold above which each new session that
opens generates a report, as defined in the Concurrent Sessions
Threshold value in the Session tab. Limit
indicates the maximum number of sessions that can be open through
the trunk at the same time, as defined in the Max Concurrent
Sessions value in the Session tab.
- View—Clicking the View button
adds the display of concurrent sessions threshold and limit to the
chart; clicking the Hide Limit button removes the display
from the chart.