ASA 5510 User Graph Monitoring

[aacable79]

Dear All,

This is my first post. I have Cisco ASA 5510 in my company. It is acting as a gateway router for all my internal client. I have allowed few users internet acces bases on IP addresses via creating NAT rule. Now I want to see every user usage , because I am having issue of slow internet, and I want to track that which specific user is using most of the bandwidth. How can I do it?

Currently I can only monitor WAN / LAN usage but not by every user ip.

[Marvin Rhoads]

You can do this by exporting Netflow data from your ASA to a Netflow analysis tool. Thst data will include every source and destination IP along with some other information. On the ASA itself, you can only watch near-real-time data with CLI show commands and ASDM.

For Netflow analysis you can use tools like ntop (open source) or various licensed management products (Cisco Prime Infrastructure with Assurance, Solarwinds Netflow Traffic Analyzer, Plixer, ManageEngine, etc.). Most of the licensed products have free trial downloads you can use to try out the software.