Forum Discussion
EricStarker
Jan 04, 2018Community Manager
Why it’s important to integrate your VPN with Microsoft Advanced Threat Analytics
A majority of IT teams use Virtual Private Network (VPN) connections as a method to grant remote users access to corporate resources from outside the company’s network. A VPN connection provides empl...
Sam Cooks
Copper Contributor
Hello, need assistance with VPN integration. Using Microsoft Network
Policy Server and have setup accounting in my connection policy to send
events to multiple gateway servers but nothing shows up. I can see
events on the policy server showing remote connections. Any ideas on
where i can go for help or what to look for? Thanks
EliOfek
Jan 28, 2018Microsoft
You can query any collection in mongo that starts with "VpnAuthenticationEvent" to see if you are getting any VPN events into ATA.
The collections are created on demand, so if you see you have those, at some point events were coming in...
from the mongo bin folder, run:
mongo ATA --eval "db.getCollectionNames().filter(function (c) { return c.indexOf('VpnAuthenticationEvent') == 0; })"