hi,   but this would'nt work when using auto-vpn, or I'm wrong?   ... View more

Hi - have you tried filtering on security device events rather than client events in the Monitor > Event Log?  ... View more