View Login History Pix ASA

[jtmullis82]

Does anyone know how to view the login history of a ASA? I would like to monitor who is logging in and when.

[Marcin Latosiewicz]

Joseph,

What you're looking for is accounting, or option similar to "last" on unix and unix-like systems?

The ASA/PIX do not have those features built in as far as I know.

You can monitor syslog but it might be a pain, so I'd suggest setting up aaa accounting ....

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/access_aaa.html#wp1047241

Hope this helps,

Marcin

[mirober2]

Hi Joseph,

What are you using to authenticate the users? You can check the AAA logs from the time when the user logs in.

You can also check the syslogs from the ASA. Syslog %ASA-6-605005 will have what you're looking for.

Hope that helps.

-Mike