collapse

Search


User Info

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: Anyconnect VPN Accounting plus Activity  (Read 7215 times)

Offline milin1607

  • Cisco Newbie
  • *
  • Posts: 9
  • Reputation: 2
  • Certification: CCIE
Anyconnect VPN Accounting plus Activity
« on: March 22, 2016, 03:29:11 AM »
Dear Team,
 
I would like to do accounting for Anyconnect VPN users and also would like to monitor the activities performed by the vpn user ?

Is it possible ? If yes then please explain in brief.



Thanks,
Milin

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 398
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Anyconnect VPN Accounting plus Activity
« Reply #1 on: March 23, 2016, 05:12:01 PM »
If you are authenticating VPN user against RADIUS server, you should automatically get accounting (eg. when user logged on/off) as part of RADIUS log.
For monitoring, what are you after on user activities? Destination IP, port, protocol?

Offline milin1607

  • Cisco Newbie
  • *
  • Posts: 9
  • Reputation: 2
  • Certification: CCIE
Re: Anyconnect VPN Accounting plus Activity
« Reply #2 on: April 27, 2016, 11:30:39 PM »
Hi Team,

My customer required :-

AnyConnect VPN user activity details such as after connected AnyConnect VPN user to the network, what resources he has accessed (RDP or any other activity), how long he has connected to the network and so on.

Can we achieve the same with using Cisco ISE integration with ASA ?



Thanks,
Milin M. Mistry

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 398
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Anyconnect VPN Accounting plus Activity
« Reply #3 on: April 28, 2016, 09:25:46 PM »
RADIUS accounting only give you session start-stop. If you need traffic log, the most basic form is sending ASA connection log to a syslog server. If you also need user and application info, you may want to look into Firepower. Firepower can integrate with ISE and automatically correlate username to traffic.

 

Related Topics

  Subject / Started by Replies Last post
2 Replies
10030 Views
Last post August 18, 2013, 05:59:34 PM
by MC
2 Replies
7168 Views
Last post October 09, 2014, 12:55:10 AM
by ModSheVit
1 Replies
6055 Views
Last post August 05, 2015, 05:53:50 AM
by MC
2 Replies
6481 Views
Last post October 11, 2015, 03:32:04 PM
by Ted
3 Replies
425 Views
Last post January 23, 2024, 10:45:24 PM
by MC

SimplePortal 2.3.7 © 2008-2024, SimplePortal