Monitor remote access VPN users ASA 5510

[Jasonch518_2]

Hello,

I managed an ASA 5510 for a client, and they have roughly 100 remote access VPN users. They want to be able to monitor who is logged onto the remote access VPN at any time, but I do not want to give them access to the firewall to do show vpn-sessiondb, or access to ASDM, unless there is a limited view login where they can only see the current VPN connections or something.

Has anyone accomplished this or found a way to do this?

Thanks.

[Collin Clark]

If your client has AAA, you can use AAA authorization (that's how we do it).

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Hope that helps.

[Jagdeep Gambhir]

You can also set up local authorization.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mgaccess.html#wp1072168