how to get username, hostname and OS info from anyconnect client

[ismailsh12]

I would like to know if there was a way to collect username, hostname and operating system info from our anyconnect users.  Currently we have syslog enabled that tells us what time users connected etc but we would like to get more info like the hostname and OS of the computer that is initiating the anyconnect connection to our headend ASA.

Thanks.

[Mohammed al Baqari · Accepted solution]

Hi,


If you use external radius server such as ISE, ASA sends this info in
radius access request which are parsed by ISE.

Otherwise, you can forward radius messages to syslog server but you need to
write custom normalization rules to parse the fields.

Anyconnect syslog messages don't include these details.

*** please remember to rate useful posts

[Marvin Rhoads · Accepted solution]

You can get the information from syslog messages if you use a Dynamic Access Policy (DAP). The DAP debug messages will have all of those details and more. You can override their severity level and get them as alerts (or whatever level message you like) to forward to your syslog server.

[vsurresh · Accepted solution]

Hi, Ismail.

You can use the command show vpn-sessiondb detail anyconnect filter name user1 to get information about the OS and AnyConnect Version. If you have a syslog server, you can use the syslog ID of 722055 to search for this information. 

ASA# show vpn-sessiondb detail anyconnect filter name user1 | incl Client

Client OS    : mac-intel              
Client OS Ver: 10.13.6                
Client Type  : AnyConnect
Client Ver   : Cisco AnyConnect VPN Agent for Mac OS X 4.7.04056
Client OS    : Mac OS X               
Client Type  : SSL VPN Client
Client Ver   : Cisco AnyConnect VPN Agent for Mac OS X 4.7.04056
Client OS    : Mac OS X               
Client Type  : DTLS VPN Client
Client Ver   : Cisco AnyConnect VPN Agent for Mac OS X 4.7.04056

https://packetswitch.co.uk/cisco-asa-useful-commands/

Please let me know if you need more information.