topic Re: Monitoring traffic through the ASA in Network Security

Monitoring traffic through the ASA

bob.mckinley — Mon, 11 Mar 2019 11:01:22 GMT

I have been using NetFlow to monitor incoming and outgoing traffic on my Cisco 1841 router. The 1841 router is just an edge router but my ASA 5510 is my firewall and where my remote site's VPN connection start and end. I've been seeing some high traffic on my router and since most of it's encrypted I can't tell who is causing all the traffic issues (actual source IP). I know the ASA doesn't support netflow so I wanted to see what other options I have to look more deeply at the traffic going through that device, unencrypted.

Thanks

Re: Monitoring traffic through the ASA

anandramapathy — Thu, 23 Aug 2007 12:17:43 GMT

you can log to a syslog server / to the ASDM itself.

Try Kiwi's syslog server which is free for 5 clients.

Check the options under ASDM, logging.

choose the level of logging you want.

Re: Monitoring traffic through the ASA

srue — Thu, 23 Aug 2007 12:24:09 GMT

Do you have an internal router that you could enable netflow on?

Re: Monitoring traffic through the ASA

bob.mckinley — Thu, 23 Aug 2007 12:26:26 GMT

No, just a Cisco 3560 switch, which doesn't support Netflow.