• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2948
  • Last Modified:

Tracking VPN logins with SYSLOG and email notifications

We have an ASA 5510 in house that acts as our VPN concentrator.

We have a tool for recording SYSLOG messages but it the ASA doesn't appear to be generating the syslogs specific for the VPN connections.

We would to fix this as well as setup email notifications whenever a user logs in via the VPN client as well as our SSL VPN.

I know the ASA can do email notifications, but how do I get it setup?
  • 2
1 Solution
Svet PaperovIT ManagerCommented:
Just tested my Cisco ASA 5510… I am using 8.2….

Cisco VPN Client (IPsec) returns a lot of debugging (7) messages starting with 713226 and continuing with 715047, 49, 64, etc…  

Cisco AnyConnect (Essential) also returns a log of informational (6) and some debugging (7) messages, starting with 54013 and continuing with 54013, 14, 15, etc.

Here is how you can enable the e-mail on logging messages http://community.spiceworks.com/how_to/show/388
Svet PaperovIT ManagerCommented:
Correction, the Cisco AnyConnect messages start with 725001, continue with 725008, 12, 2, 7

I was looking wrong numbers…

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now