I am running a pix 501 ver 6.1 with tacacs 3.0 server runninfg on a NT box.
I have all the user authenticated via tacacs going inbound and outbound
and have setup accounting as well.
I would like to find a EASY way to compile a report to find out what the users
are accessing both application and source and destination ip address.
If i check reports option through tacacs it only shows me what time the
user is validated and the application type not the source or dest address.
If i setup syslog server and setup logging console debug it shows me the source and destination and user sent to the syslog server.
Is their any way to manipulate this syslog report or is their another feature
within tacacs.
thanks