AnyConnect connection logs

[andrew333]

How long are connection logs maintained by the AnyConnect client? We may want to see what VPN hosts were connected to on specific workstations and need to know how far back we could get this information from the AnyConnect Windows log or a DART bundle. Thanks.

[Sheraz.Salim]

You can configure the syslog to external server. In syslog Asa also keep the logs of anyconnect users.

on Asa it only keep the log of connected active anyconnect connection.

[andrew333]

Sheraz, Thanks for responding. We need the logging on the AnyConnect host side not the head-end. This is so we can identify if a user connects to a non-corporate VPN.

[Sheraz.Salim]

I dont think there is anything like this. i have not seem. what you can do is cert based so only machine can connect which has a cert install on it. or you the other idea i can think of is using ISE. as it keep the record of logs which user is connected and what machine s/he log in as.