vpn traffic

[petercinvest]

in corporate vpn network, how to monitor the important traffic telemetry from the endpoints? thanks

[balaji.bandi]

depends on your deployment : (you can do overall with netflow)

here is some of solution from cisco :

https://www.cisco.com/c/en_uk/products/security/anyconnect-secure-mobility-client/index.html#~stickynav=1

[petercinvest]

I'm asking how to monitor not how to protect

[Marvin Rhoads]

AnyConnect Secure Mobility client software can not only protect but also serve as the source of instrumentation that can be used to monitor. It does that via the Network Visibility Module (NVM). NVM collects Netflow data and sends it to your Netflow analysis tool of choice (could be Splunk, Stealthwatch, PRTG etc.).

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect45/administration/guide/b_AnyConnect_Administrator_Guide_4-5/nvm.html

https://splunkbase.splunk.com/app/2992/

https://www.cisco.com/c/en/us/products/security/stealthwatch/index.html

https://www.paessler.com/netflow_monitoring