Monitoring VPN Sessions

[Arshad Khan]

Hi,

I have configured Remote Access IPSEC VPNS on my Cisco 5510 Security plus firewall now i need to monitor all remote access VPN session records and activities of VPN users as its need.

Kindly suggest the best solution.

Regards,

Arshad Ahmed

[Collin Clark]

To monitor the login/logout session you can use a AAA server like Cisco ACS or Microsft NPS. As far as tracking what users do, that would be done somewhere other than on the ASA. You could do something like monitor the Windows event logs or setup least permissions and "trust" them.

[Javier Portuguez]

Arshad,

Just to add my two cents, to Collin´s post (5 stars).

ASA/PIX: Pass-through Traffic Accounting for VPN Clients Using ACS Configuration Example

Managing Accounting in NPS

HTH.

Portu.

Please rate any helpful posts and mark this question as answered if you do not have any further questions.

[Arshad Khan]

Dear all,

I have done by filter syslog ID "113019"  which is used for VPN session termination and apply email on desire event id so problem is said to be solved now.

Regards,

Arshad