Remote Access VPN - User Logins Trail

[tech_trac]

Hello,

If remote access VPN is configured on Cisco ASA, is it possible to view and store the details when a VPN user connects and disconnects and any intermittent activity.

Thanks

[JORGE RODRIGUEZ]

Hi,

For storing asa activity information for later review you will need to send it to either a ftp server or syslog server.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml

Regards

[tech_trac]

Hi,

Is it only 'show logging' where the VPN user login/logout details can been seen or is there any other entry for that (to view on the ASA).

Thanks.

[JORGE RODRIGUEZ]

you can do show vpn-sessiondb ? and place a question mark to see all options ..

show vpn-sessiondb remote , will show active RA vpn sessions, you can also look at ASDM real time log , when RA VPN client connects look at the ASDM syslog message ID at the far left, take notes of message ID, when the RA user VPN logs out look at the message ID number, and like I said before setup a syslog and filter those message ID numbers to be sent to syslog server. or show logging message at cli can provide you with information.

Regards