asked on

Cisco ASA - View real-time incoming connections using ASDM

Using the ASDM real time log viewer, all I see are outbound connections. Is there anyway to view incoming connections?

I have an internal website using an ACL and NAT. Logging is enabled for that ACL and I can see Hits on the counter. If I right click on that ACL and select show log, there is nothing there. I also tried setting logging on that ACL to debugging and still nothing.

When looking at the Real-Time Log Viewer all I see are outgoing connections, showing our inside IPs for source and internet IPs for destinations.

Thanks

ASKER CERTIFIED SOLUTION

btan

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

netcmh

You could also use a Syslog server to capture all that information and view it with all sorts of filters to get granular reporting. There's a whole bunch of free tools - Kiwi, PRTG, etc. We're using AccelOps and we think it's great.

SOLUTION

Alan

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

btan

thanks for sharing, the pcap capture is still the safe bet and not real time. in fact, most are doing that for in depth analysis offline. Similar to this post which means long time it has exist and till now not much diff ..
http://ipfield.net/2013/06/asa-packet-capture-using-cli-and-asdm-config-example/

Another area that I was thinking s netflow but then it is not real time too..

Alan

ASKER

Included my own post since I provided a more up to date link.

btan

thanks for sharing