15 02, 2016

Creating a Remote Desktop Report (RDP Connections) with WebSpy Vantage

By | 2016-02-15T06:31:35+00:00 February 15th, 2016|Articles, Firewall Analysis, How To, Log File Analysis, Microsoft Threat Management Gateway, System Administration, Tips and Best Practices, Uncategorized, Vantage, WebSpy|Comments Off on Creating a Remote Desktop Report (RDP Connections) with WebSpy Vantage

This article walks through the process of using WebSpy Vantage to create a comprehensive Remote Desktop Report by extracting information about remote desktop sessions (RDP) from your firewall log files. I'm using Firewall logs from Microsoft Forefront TMG, but you could just as easily use logs from other firewalls, such as the packet filter logs from Sophos UTM, or connection end events from Cisco ASA. The general process is the same. Let's get started.