Monitor Anyconnect VPN Tunnel Traffic

[gtvit]

Hello, 

We are currently using a ASA5545X with an anyconnect VPN using split tunneling.  With most of our users working from home, i wanted to monitor our anyconnect vpn tunnel to check the speed and ensure there's enough bandwidth so users aren't experiencing slowness.  Is there a way to do this?  We use a monitoring tool called PRTG but it doesn't look like it has a feature to monitor the tunnel.  

Thanks

[Cristian Matei]

Hi,

   You don't care about each individual tunnel, do you? Per your request, you care about the overall/total BW on the Internet facing interface, correct? If there is more traffic than what you get from your ISP, you know there is a problem.

   However, if you really want to see VPN traffic, make use of NetFlow:

https://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/guide/asa_netflow.html#pgfId-1330480

   Another option would be to use SNMP, accessing the following MIBs: CISCO-IPSEC-FLOW-MONITOR-MIB and CISCO-REMOTE-ACCESS-MONITOR-MIB    

Regards,

Cristian Matei.

[Deniz Y]

Hi,

I have a similar question. I wonder how to monitor and derive the statistics of VPN usage. More exactly, how can i get the statistics of the traffic that is going through the VPN tunnel. This is for a customer that has restrictions on what their clients are allowed to use the VPN for. So it is mainly to avoid clients using unnecessary bandwidth. 

Regards,

Deniz

[balaji.bandi]

You can Monitor external Link connected to ASA towards Internet see the availbaliyt compare to base line config.

[vpnttg001]

Hi,

Check http://www.vpnttg.com/

Advantage  of VPNTTG over other SNMP based monitoring software’s is  following:  Other (commonly used) software’s are working with static OID  numbers,  i.e. whenever tunnel disconnects and reconnects, it gets  assigned a new  OID number. This means that the historical data, gathered  on the  connection, is lost each time. However, VPNTTG works with VPN  peer’s IP  address and it stores for each VPN tunnel historical  monitoring data  into the SQL server and into the RRD (Round Robin  Database) file.

HTH

[Georg Pauwen]

Nice tool !