cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2179
Views
0
Helpful
6
Replies

Irrelevant traffic by user, firepower management center

kh.farhad
Level 1
Level 1

Hi,

I'm using an asa firepower 5515-x and I've configured captive portal for users to authenticate to go to internet. In dashboard of management center I can see some widgets, one of them is traffic by user where I can see authenticated users' total KB. The problem is that this amount of traffic is so lower than the real amount because I tested a download on my PC and a small amount of traffic appeared there from my user. And also KB/s is so lower than real, for example when I'm getting 1 MB/s it shows only 0.02 KB/s. And at last the most traffic shown is related to Unknown user. Is there a way to make it happen to show the real traffic per user?

6 Replies 6

Aastha Bhardwaj
Cisco Employee
Cisco Employee

Hi,

You can edit on what parameter you want to display the traffic like : Total traffic etc . Ideally it should display the total amount of traffic for that particular user but sometime sit takes a while to poll the exact numbers on widgets and the data is refreshed every 5 minutes. Are you able to see your username in the data ?

Mostly unknown data is like for Guest user the user info is not there with your domain controller.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

Hi Aastha,

As you can see in the attached picture I have set it to aggregate on Total Traffic (KB/s) but the amount of traffic is too low. And yes those are LDAP users that I have grayed out. I have monitored system for hours but still there's no relevant data shown.

Hi,

I would advise you to open up a TAC case for same , because we might need to dive more into details.

Regards,

Aastha Bhardwaj

Hi,

I opened a TAC case but still no reply on the case, I'm still waiting.

kh.farhad
Level 1
Level 1

Doesn't anyone know where the problem is? I want exact traffic amount used by users.

belgarioz
Level 1
Level 1

I had the same problem.

I solved it in the "log section" of the acess policy, setting it to both log at the beginning and at the end of connection

Review Cisco Networking for a $25 gift card