How to identify what machines are using the most of your internet connection - Cisco ASA

Posted on 2009-04-23
Medium Priority
Last Modified: 2012-05-06
What software solutions out there would provide us real-time information about what machines are consuming the most of our bandwidth in real time.  We are having spikes in usage lately and we haven't been able to identify who is using the most of our bandwidth.  Is there a tool to use with a Cisco ASA to give us a view of what machines are pulling how much data through our internet connection?
Question by:tc100years
LVL 20

Expert Comment

ID: 24215331
If you are using ASA 5580, it supports netflow 9 which provides extensive details on top talkers, etc...


Go to ASDM - Home - Firewall Dashboard and enable threat detection or enter the lines

threat-detection basic-threat
threat-detection statistics

You'll then have a Top 10 Usage Status Graph that you can use to view Bytes Transferred in last few hours.

Expert Comment

ID: 24215522
If you want to monitor individual machines first you have to enable snmp on the machines and then you can use solarwinds NPM to monitor all their bandwidths even their total transfered traffic daily or hourly.
LVL 25

Expert Comment

ID: 24220455
If you have a managed switch, I'd recommend Ntop.  It gives very detailed traffic analysis for being free
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

LVL 32

Accepted Solution

Kamran Arshad earned 2000 total points
ID: 24221926

It would be nice if your ASA supports Netflow. Then you can use any of the Netflow Analyzers to check the per IP per protocol details;

SolarWinds NetFlow Analyzer      www.solarwinds.com      NetFlow/SFlow
Scrutinizer NetFlow/Sflow Analyzer      www.plixer.com      NetFlow/SFlow
Caligare Flow Inspector      www.caligare.com      NetFlow/SFlow
PRTG      www.paessler.com/prtg      NetFlow/RRDTool
Adventnet Netflow Analyzer      www.adventnet.com      NetFlow

If it does not then you may try out Nprobe;


Author Comment

ID: 24224019
Does anybody know if an ASA 5520 supports NetFlow?

Author Comment

ID: 24224578
It appears it does if you upgrade the ASA software to 8.2.  Thanks for all of your answers, they've been helpful.  

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of the companies I’ve worked with have embraced cloud solutions due to their desire to “get out of the datacenter business.” The ability to achieve better security and availability, and the speed with which they are able to deploy, is far grea…
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Suggested Courses
Course of the Month16 days, 7 hours left to enroll

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question