Logging Anyconnect Client Activity

[Andrew MacDonald]

We have a number of people working remotely using anyconnect with our Cisco ASA 5510. We need a way to log what times people log in and for how long they are logged in. Is there any way of doing this? It has become very critical for us. If I can't get an answer here I can open up a TAC case if necessary. 

Thanks!

-Andy

[Marvin Rhoads]

Login and logout of remote access VPN creates a syslog event. The event id varies according to what type of VPN it is. The easiest way to confirm them is to make sure you have informational logging level set and watch your syslog viewer while logging in and out on a test basis.

You can then add those ids to an event list and set it up to be sent to a syslog server or emailed to you.