Monitoring SSL VPN Connections

[Patrick McHenry]

I know this topic isn't appropriate for this forum but, you just don't get the hits that you do on this one so I'm trying here.

Hi,

On the ASA5520 we would like to create a report that gives us trending over 6 monthes for the amount of people logged in via the SSL VPN and for how long. Is there a way to do this on the ASA5520? Does it have this ability? Could I do this in SolarWinds? My boss mentioned a software package that Cisco has that will show a history - is this correct?

Thanks, Pat.

[Reza Sharifi]

Hi,

You can use ASDM to log the connections locally or send it to an external syslog server:

http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/configuration_guide/monitor_syslog.html

HTH

[Patrick McHenry]

Reza,

Thanks, this is a good doc and if I am going to enable logging to get the anyconnect client info I will surely go through this but, I don't see anything about getting stats for anyconnect clients. For instance; how would I parse the anyconnect client connections and compile it into a report after it has been logged. Seems like that would be a real pain - maybe I'm wrong. I need a report that only contains anyconnect information. Could you direct me to the exact part of the doc you gave me that might help me do this if possible?

By the way, have you heard of the software package that I mentioned?

Thanks again, Pat.

[Patrick McHenry]

http://thwack.solarwinds.com/docs/DOC-71304

I wonder if this is the direction I shoud go?

[Reza Sharifi]

Pat,

You can try this one for free for a couple of week.  Usually Solarwind products are pretty good.

http://www.solarwinds.com/log-event-manager.aspx

HTH

[Reza Sharifi]

You also may want to test drive this one too.

https://supportforums.cisco.com/docs/DOC-1222

HTH