I was wondering how others do this, but I have got users/offices going through my Cisco Concentrator. However I want to move these off and onto our Cisco ASA.
The problem is I need to monitor users internet traffic which is on a server inside (Surf Control), this works for the Concentrator as users come in and go via the ASA firewall and out, along the way the traffic is caught be the web filter server. The ASA is doesn't do this, as the VPN traffic comes into the ASA and straight out again to the internet.
How can I get round this?