How to get user device system in azure vpn point to site configuration for individual user disconnect action control

Nitin Arora 25

Hi, how to get vpn user name as a individual Device name with azure vpn point 2 site. Using azure vpn basic sku and vpngw1 with another vpn with configuration like openvpn and ikv2

GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-05-09T10:56:33.3466667+00:00

Hello @Nitin Arora ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I believe you are talking about the Azure Point-to-site VPN session management.

Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/p2s-session-management

If I understand correctly, you would like to know if it is possible to get the individual Device name rather than the VPN user name on the sessions page. Could you please confirm if my understanding is correct?

Regards,

Gita
GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-05-10T14:01:39.4033333+00:00

@Nitin Arora , could you please provide an update on this post and share the requested information?
Nitin Arora 25 Reputation points

2023-05-11T06:52:07.16+00:00

@GitaraniSharma-MSFT I used the above configuration, vpn user name shown as client vpn certificate name, but i want to see individual vpn client device name, if you any solution then please share.

Best Regards,

Nitin Arora
GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-05-12T11:25:04.1666667+00:00

@Nitin Arora , thank you for the additional details. I've reached out to the Azure VPN Product Group team to discuss this scenario. Please allow me some time to get back to you with an update. Appreciate your patience and understanding on this matter.
Nitin Arora 25 Reputation points

2023-05-12T11:37:25.8066667+00:00

@GitaraniSharma-MSFT Thank you for reaching out to the Azure VPN Product Group team. I appreciate your proactive approach and look forward to your update regarding the discussed scenario. Your efforts and support are greatly valued.

Best Regards,

Nitin Arora
GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-05-29T08:55:58.5233333+00:00

Hello @Nitin Arora , Apologies for the delay in response. I'm still waiting for an update from the Azure VPN Product Group team as they are still investigating this on their end. I'll add a comment/answer as soon as I've an update from them. Thank you for your patience and understanding on this.
GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-06-26T12:45:02.15+00:00
Hello @Nitin Arora , Apologies for the delay in response.

I was not able to get an update from the Azure VPN Product Group team regarding your query yet. So, I believe creating a support request would be the best approach here.

If you have a support plan, I request you file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

In case you need help with a one-time free technical support, please send an email with subject line "ATTN gishar | How to get user device system in azure vpn point to site configuration for individual user disconnect action control" to AzCommunity[at]Microsoft[dot]com with the following details, I will follow-up with you.

Reference this Q&A thread

Your Azure Subscription ID

Note: Do not share any PII data as a public comment.

We will post a summarized answer once the issue is resolved.

Regards,

Gita

1 answer

GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-06-30T12:54:44.5166667+00:00

Hello @Nitin Arora ,

Apologies for the delay in response.

I understand that you would like to know if it is possible to get the individual Device name rather than the VPN client certificate name on the Azure Point-to-site VPN session management page.

I discussed this requirement with the Azure VPN Product Group team and below is their response:

When you set P2S session locally, the VPN username field displays whatever info we have in the cert that was used to authenticate.

There are 2 types of VPN tunnels - Device tunnel and User tunnel.

If you want the device name to be displayed in the VPN username, you will need to create a Device tunnel.

You can find the instructions to do that in the below doc:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel

NOTE: The device tunnel is only supported for IkeV2 protocol.

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Joel Francis 5 Reputation points

2023-11-03T14:26:27.23+00:00

Hi GitaraniSharma,

I am experiencing the same issue. We are using a device tunnel and still cannot see the indiviadul devices. Only the individual certificates are displayed instead of the device names. Our setup consist of and NDes server and Azure VPN device tunnel administered via intune..

Joel Francis 5 Reputation points

2023-11-03T14:52:56.83+00:00

GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2023-11-09T17:55:52.7266667+00:00

Hello @Joel Francis ,

Apologies for the delay in response.

Since you are already using the Device tunnel setup for your Azure VPN and still unable to see the individual device name in the VPN username field of Point-to-site session management tab, I would request you to log a support request. To find the exact root cause of this issue, the support team have to check your configuration and engage the backend team, if needed.

Regards,

Gita

Joel Francis 5 Reputation points

2023-11-22T13:59:35.6366667+00:00

Hi Gitarani,

I logged a ticket and now waiting for a response from MS.

regards,

Joel
Sign in to comment

Share via

How to get user device system in azure vpn point to site configuration for individual user disconnect action control

1 answer