cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5617
Views
5
Helpful
3
Replies

Monitoring VPN Sessions

Arshad Khan
Level 1
Level 1

Hi,

I have configured Remote Access IPSEC VPNS on my Cisco 5510 Security plus firewall now i need to monitor all remote access VPN session records and activities of VPN users as its need.

Kindly suggest the best solution.

Regards,

Arshad Ahmed

3 Replies 3

Collin Clark
VIP Alumni
VIP Alumni

To monitor the login/logout session you can use a AAA server like Cisco ACS or Microsft NPS. As far as tracking what users do, that would be done somewhere other than on the ASA. You could do something like monitor the Windows event logs or setup least permissions and "trust" them.

Arshad,

Just to add my two cents, to Collin´s post (5 stars).

ASA/PIX: Pass-through Traffic Accounting for VPN Clients Using ACS Configuration Example

Managing Accounting in NPS

HTH.

Portu.

Please rate any helpful posts and mark this question as answered if you do not have any further questions.

Dear all,

I have done by filter syslog ID "113019"  which is used for VPN session termination and apply email on desire event id so problem is said to be solved now.

Regards,

Arshad