collapse

Search


User Info

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?
« previous next »
Pages: [1]

Author Topic: Anyconnect VPN Accounting plus Activity  (Read 15743 times)

Offline milin1607

  • Cisco Newbie
  • *
  • Posts: 9
  • Reputation: 2
  • Certification: CCIE
Anyconnect VPN Accounting plus Activity
« on: March 22, 2016, 03:29:11 AM »
Dear Team,
 
I would like to do accounting for Anyconnect VPN users and also would like to monitor the activities performed by the vpn user ?

Is it possible ? If yes then please explain in brief.



Thanks,
Milin
Logged

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 401
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Anyconnect VPN Accounting plus Activity
« Reply #1 on: March 23, 2016, 05:12:01 PM »
If you are authenticating VPN user against RADIUS server, you should automatically get accounting (eg. when user logged on/off) as part of RADIUS log.
For monitoring, what are you after on user activities? Destination IP, port, protocol?
Logged

Offline milin1607

  • Cisco Newbie
  • *
  • Posts: 9
  • Reputation: 2
  • Certification: CCIE
Re: Anyconnect VPN Accounting plus Activity
« Reply #2 on: April 27, 2016, 11:30:39 PM »
Hi Team,

My customer required :-

AnyConnect VPN user activity details such as after connected AnyConnect VPN user to the network, what resources he has accessed (RDP or any other activity), how long he has connected to the network and so on.

Can we achieve the same with using Cisco ISE integration with ASA ?



Thanks,
Milin M. Mistry
Logged

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 401
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Anyconnect VPN Accounting plus Activity
« Reply #3 on: April 28, 2016, 09:25:46 PM »
RADIUS accounting only give you session start-stop. If you need traffic log, the most basic form is sending ASA connection log to a syslog server. If you also need user and application info, you may want to look into Firepower. Firepower can integrate with ISE and automatically correlate username to traffic.
Logged
Pages: [1]
« previous next »
 

Related Topics

  Subject / Started by Replies Last post
2 Replies
26732 Views 		Last post August 18, 2013, 05:59:34 PM
by MC
2 Replies
15671 Views 		Last post October 09, 2014, 12:55:10 AM
by ModSheVit
1 Replies
13987 Views 		Last post August 05, 2015, 05:53:50 AM
by MC
2 Replies
16174 Views 		Last post October 11, 2015, 03:32:04 PM
by Ted
3 Replies
52725 Views 		Last post January 23, 2024, 10:45:24 PM
by MC

SimplePortal 2.3.7 © 2008-2024, SimplePortal