Welcome again to Implementing Microsoft Windows Always On VPN.
In this module, we'll discuss monitoring and reporting options.
Always On VPN administrators have a few different choices when it comes
to monitoring and reporting for Always On VPN. First, there's a
graphical user interface or GUI, and here, specifically, there's
actually more than one management console to choose from. One of them
you'll already be familiar with because, honestly, we've been using it
throughout this course and for all of our configuration tasks to this
point; however,
there's an alternative solution that I find more useful for day‑to‑day
operational use, and I'll explain more in detail a little bit later.
Administrators can also use PowerShell to perform many monitoring and
reporting tasks, and you can use either the GUI or PowerShell to view
current system health and monitor user activity as well.
All of our previous lessons have been focused on granting secure
remote access to users and devices, but there may come a time when
you need to either disconnect a user or device, or perhaps prevent a
user or device from connecting.
For example,
if an employee is terminated, or perhaps an endpoint is compromised with
malware, or maybe a device is lost or stolen, you'll definitely want to be
able to prevent them from accessing the network in that scenario. I'll, of
course, demonstrate this a little bit later.
And finally, I want to show you how to enable inbox accounting so that
you can generate historical reports for user activity.
This is really helpful for a variety of reasons,
but most importantly,
you may be asked to provide access records for individual users at
some point in the future, and having the ability to generate these
reports, obviously, is going to be vital.
Having access to historical data is often required for
regulatory and compliance reasons, too, and,
of course, that'll be crucial for forensic analysis in the event of a security breach.