• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 487
  • Last Modified:

Logging traffic usage on ASA5520

I need to be able to provide traffic statistics for the 'outside' interface.  Currently we are saving the syslog output to our FTP server.

There was so much traffic that it was unable to keep up with the device.  Can someone let me know how to log the traffic on the outside interface (bitrate) for upload and download, but not everything else?

  • 2
1 Solution
If you are simply looking to monitor bandwidth utilization and not keep detailed traffic logs, you could use a program called MRTG(http://oss.oetiker.ch/mrtg/). MRTG uses SNMP to gather information and creates a html report based on this information. It is highly customizable however the default installation will simply monitor bandwidth utilization for you interfaces.

The site has the necessary documentation to step you through the install, although it may require some fiddling with to get working, if its your first time installing it as not as simple as running an installer. The ASA configuration is easy as all you need to do is configure SNMP, the windows server part is more complicated but the guide is sufficient.

The MRTG 2.16.1 Windows Installation Guide

It is best to monitor the utilization on the device directly connected to the ISP, if there is a router between the firewall and ISP connection, you should monitor the router instead. Some ISP's even provide this type of information upon request, if so no work on your part would even be necessary.
Everything work out ok?
gracewildAuthor Commented:
I will work on getting that configured.  Thanks for your help.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now