topic Re: Monitor remote access VPN users ASA 5510 in Network Security

Monitor remote access VPN users ASA 5510

Jasonch518_2 — Mon, 11 Mar 2019 14:09:22 GMT

Hello,

I managed an ASA 5510 for a client, and they have roughly 100 remote access VPN users. They want to be able to monitor who is logged onto the remote access VPN at any time, but I do not want to give them access to the firewall to do show vpn-sessiondb, or access to ASDM, unless there is a limited view login where they can only see the current VPN connections or something.

Has anyone accomplished this or found a way to do this?

Thanks.

Re: Monitor remote access VPN users ASA 5510

Collin Clark — Fri, 07 Nov 2008 14:21:41 GMT

If your client has AAA, you can use AAA authorization (that's how we do it).

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Hope that helps.

Re: Monitor remote access VPN users ASA 5510

Jagdeep Gambhir — Fri, 07 Nov 2008 20:54:39 GMT

You can also set up local authorization.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mgaccess.html#wp1072168