Logging AnyConnect VPN client sessions

[Qays]

Hi

My company use cisco ASA for remote access VPN using AnyConnect, also the LDAP configured with the ASA  to authenticate the active directory users in AnyConnect.

I need idea about the best way to log AnyConnect connection sessions ?

could I use cisco ISE to log the connections ?

[Rob Ingram]

Hi @Qays 

Yes, if you use RADIUS to authenticate to ISE with RADIUS accounting this will log the users' connection and provide session information such as login, logoff and duration. This is the standard way of authenticating RAVPN users.

ISE will proxy the login to an external authentication source such as LDAP or AD.

HTH