• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 485
  • Last Modified:

Logging traffic usage on ASA5520

I need to be able to provide traffic statistics for the 'outside' interface.  Currently we are saving the syslog output to our FTP server.

There was so much traffic that it was unable to keep up with the device.  Can someone let me know how to log the traffic on the outside interface (bitrate) for upload and download, but not everything else?

Thanks
0
gracewild
Asked:
gracewild
  • 2
1 Solution
 
raptorjb007Commented:
If you are simply looking to monitor bandwidth utilization and not keep detailed traffic logs, you could use a program called MRTG(http://oss.oetiker.ch/mrtg/). MRTG uses SNMP to gather information and creates a html report based on this information. It is highly customizable however the default installation will simply monitor bandwidth utilization for you interfaces.

The site has the necessary documentation to step you through the install, although it may require some fiddling with to get working, if its your first time installing it as not as simple as running an installer. The ASA configuration is easy as all you need to do is configure SNMP, the windows server part is more complicated but the guide is sufficient.

The MRTG 2.16.1 Windows Installation Guide
(http://oss.oetiker.ch/mrtg/doc/mrtg-nt-guide.en.html)

It is best to monitor the utilization on the device directly connected to the ISP, if there is a router between the firewall and ISP connection, you should monitor the router instead. Some ISP's even provide this type of information upon request, if so no work on your part would even be necessary.
0
 
raptorjb007Commented:
Everything work out ok?
0
 
gracewildAuthor Commented:
I will work on getting that configured.  Thanks for your help.
0

Featured Post

Get Certified for a Job in Cybersecurity

Want an exciting career in an emerging field? Earn your MS in Cybersecurity and get certified in ethical hacking or computer forensic investigation. WGU’s MSCSIA degree program was designed to meet the most recent U.S. Department of Homeland Security (DHS) and NSA guidelines.  

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now