<div>
ASA-5-722037: Group &lt;My Group&gt; User &lt;My User&gt; IP &lt;My IP&gt; SVC closing connection: User Requested.<br />
<br />
Is a common connection string for a user. &nbsp;There should also be an open i am looking for the standard for SSL but should be similar, look for when the username is passed.
</div>


ASA-5-722037: Group <My Group> User <My User> IP <My IP> SVC closing connection: User Requested.

Is a common connection string for a user.  There should also be an open i am looking for the standard for SSL but should be similar, look for when the username is passed.

<div>
<div class="content wysiwyg-content">
I'm generate to generate a report from our ASA SYSLOGs to find out how often our users have been logging in with there VPN client.<br />
<br />
We have been recording the SYSLOGs from our ASA 5510 for months now but we are having difficulty sorting through it to generate a suitable report.<br />
<br />
What I would like is a report that tells me when users authenticated to the firewall with there VPN client and when they disconnected,I would also like a similar report for the SSL VPN.<br />
<br />
But the catch is I have no idea what SYSLOG events I should be looking for as I'm literally sorting through millions of events.<br />
<br />
Does anyone know these events off hand?<br />
<br />
Once I get that I can just setup the report filtering in our tool.
</div>
</div>


I'm generate to generate a report from our ASA SYSLOGs to find out how often our users have been logging in with there VPN client.

We have been recording the SYSLOGs from our ASA 5510 for months now but we are having difficulty sorting through it to generate a suitable report.

What I would like is a report that tells me when users authenticated to the firewall with there VPN client and when they disconnected,I would also like a similar report for the SSL VPN.

But the catch is I have no idea what SYSLOG events I should be looking for as I'm literally sorting through millions of events.

Does anyone know these events off hand?

Once I get that I can just setup the report filtering in our tool.

ASA VPN SYSLOG events

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

Routers

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).