Using the Web Monitor, you can monitor the number of endpoint users who are connected to the currently monitored Forefront Unified Access Gateway (UAG) server.

You should monitor users, as and when required, and when you want to:

This topic describes the following procedures:

Monitoring users

To monitor users

  1. Open the Web Monitor.

  2. To retrieve information about all users who are currently connected, click Current Status in User Monitor.

    A column chart displays two columns for each trunk. The columns provide information about the number of authentication sessions that are currently open through the trunk, and the number of authenticated unique users currently using the trunk. For example, if a user opens two concurrent sessions with the trunk, two sessions are counted, but only one unique user. A table displays the session and user information in a tabular format. By default, the window refreshes data every 15 seconds.

  3. To monitor user behavior over time, for a selected trunk or all trunks, click the icon in the Trunk Name list next to a specific trunk name, or next to All Trunks. You can scroll to the period of time you want to monitor.

    User behavior is displayed in a line chart, showing both authenticated and authenticated unique users, at predefined intervals. By default, data is refreshed at 10 second intervals.

  4. To receive a detailed snapshot of the sessions currently open for each user, click Active User Monitor. Then, in the active users windows, select the trunk from the Trunk list.

    The following user settings for the trunk are displayed:

    Lead User—The user who initiated the session.

    Session ID—Unique session identifier. You can click the Session ID for details of the selected session.

    Repository—Authentication server used to authenticate the user.

    Started At—Date and time the session started.

    Duration—Duration of the session.

    Events—Clicking this button generates a report of events related to the session. It is displayed in the event reports window.

    Terminate—Clicking the Error icon terminates the session. After termination, the session no longer appears in the User Session list, and the status of the session in the Session Monitor - Active Sessions windows changes to "unauthenticated". Note that you cannot terminate the current session.

    By default, the data is refreshed every five minutes.

Monitoring a user session

To monitor a user session

  • In the Active Sessions window, click a session ID.

  • In the Session Details window, the following session information is displayed:

    • General information about the session is provided on the General tab. The lead user is the user who initiated the session.

    • All of the applications for which a session user is authorized are displayed on the Applications tab.

    • Information about the client endpoint from which the session originated is displayed on the Endpoint Information tab. This includes information about the IP address and domain of the client endpoint, and information about Forefront UAG client components and other related software installed on the client endpoint.

    • Session parameters are displayed on the Parameters tab.

Querying user statistics

The user statistics window enables you to view and analyze both the history and the current status of Forefront UAG servers, such as average session duration for each user, or the currently active sessions. When you first access window, the query form is displayed. You use the query form to submit a query. Query results are displayed in the statistics window. You can run a query as follows.

To query user statistics

  1. Open the Web Monitor.

  2. Click Statistics in User Monitor.

  3. In the Trunks list, select the trunk for which you want to generate the query.

  4. Specify a period of time for the query. You can either select a predefined period or define dates in Start date and End date.

  5. In Lead User, define the users for which to generate the query. Specify the user name using the following syntax:

    <domain_name>\<user_name>

    You can use the asterisk wildcard (*) at the end of the search string to define a group of users. For example, to enter a query for all users of a domain named “ActiveDirectory”, enter the following in Lead User: ActiveDirectory\*

    The search is case-sensitive.

  6. Click Submit to run the query. The results are displayed in the window.

    After you submit a query, when you return to the query form from the “query results” view, you can click Show last results to display the results of the last query submitted, regardless of any changes you might have made in the query form.

Query results are displayed in accordance with the settings you specified in the query. If query results are available only for a part of the defined period, this is also indicated, under the Period field. A line chart displays the number of concurrent sessions for each of the trunks in the query. The color that represents each trunk on the chart is indicated in the legend, to the left of the trunk name. A table displays information on each of the trunks that were queried. You view the data that is displayed in the chart in a tabular format by clicking the View Chart Data button. Use the paging and zooming controls to focus the view on the period of time you want to monitor. When you zoom out to the smallest view, the window displays the entire period that is queried, up to the predefined interval limit. When you zoom in to the largest view, the window displays 10 intervals; to view additional intervals, use the paging controls. Click Show query form to return to the query form.

The query results include the following:

  • Lead User—The user who initiated the session. Click the user name to display a list of all the applications that the user accessed during the query period. You can then click the displayed application for details of user access to the application.

  • Average session duration—Average duration of sessions for the user during the query period.

  • Total session duration—Total duration of sessions for the user during the query period.

  • Accesses—Number of times the user accessed the site during the query period. Click the number of accesses to displayed application access statistics for the user.

    The following application access statistics are displayed:

    • Session ID—Unique session ID. Click the session ID to display a list of all of the applications that the user accessed during the query period. Then click the application name to display information about user accesses to the application during the query period.

    • Session Start Date—Date and time the session started.

    • Session End Date—Date and time the session ended. Current sessions are marked as "Active".

    • Duration—The duration of the session, from the time it started until the time when the query was generated.