Solved

looking at Cisco ASA vpn client usage

Posted on 2008-10-16
3
341 Views
Last Modified: 2008-10-17
I currently look at raw syslog data "catchall" files to see when my vpn users have logged on, it looks like this:
3 Oct 16 2008 17:33:05 Group = groupname, Username = user, IP = xx.x.xx.xx, PHASE 1 COMPLETED
It doesn't show however, when they log off.   How can I get a quick look at 3 different vpn users and their on, off activity?

Thanks,

Patty
0
Comment
Question by:PManiace
  • 2
3 Comments
 
LVL 11

Expert Comment

by:billwharton
ID: 22736605
there isn't an easy way to do this. What you'll need to do is configure snmp traps and have a syslog server set up. Then call TAC and ask them exactly what MIB's apply to vpn user conect & disconnect. They'll provide that to you and once you configure it, then you'll see syslog messages every time user connects & disconnects. However, you'll still need to read through the syslog text file and search 'usernames' in it and get info that way. Not a really graceful method
0
 

Author Comment

by:PManiace
ID: 22736613
Thanks.  Who is TAC?
0
 
LVL 11

Accepted Solution

by:
billwharton earned 250 total points
ID: 22736625
TAC is the Cisco technical assistance center. Do you have any support contracts for this ASA device? If not, you should call a cisco partner in your area and get smartnet support. This is necessary as if your device fails or there is a major problem, cisco would not be able to help you without a contract
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall site to site VPN 10 74
Cisco ASA Restarted Suddenly 11 78
anyconnect password change 2 32
printer shows as offline while connected to vpn 13 70
When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now