topic Re: ASA live traffic monitoring in Network Access Control

ASA live traffic monitoring

Hamed Karimi — Fri, 21 Feb 2020 18:57:21 GMT

Hey Guys,

How can I monitor denied traffic real-time?

With "show conn", it just shows the accepted sessions, but I want to know if there is a source IP that sends traffic (even through IPsec tunnel) and get denied.

Packet tracer is not handling live traffic.

Thanks

Re: ASA live traffic monitoring

Rob Ingram — Mon, 04 Jun 2018 23:03:25 GMT

Hi,
You could configure logging and send to a syslog server, alternatively log to buffer/console to view on the ASA. Logging to a syslog does not impact the performance of the ASA, logging local does.

HTH