View source country
-
Hi team
Hi have around 50 users that they are using the OpenVPN service daily. For auditor purpose, we want to see the source country of each user/ip. Do you know any internal, external tool that can provide this information?
Maybe analysing the Syslog messages or via SNMP or dashboard...
Thank you
-
Syslog and feed it into Splunk or Elastic Search.
https://docs.splunk.com/Documentation/Splunk/8.0.5/Viz/IplocationChoropleth
https://www.elastic.co/blog/geoip-in-the-elastic-stack
Never done it, but if I was I'd use one of the two above.