cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
779
Views
0
Helpful
9
Replies

VPN logs and details

itdsmartnet
Level 1
Level 1

hi,

I have configured ASA 5550 as a VPN server. I want a software from which i get information which user is logged at what time, and this software maintains history also.

Thanks

1 Accepted Solution

Accepted Solutions

you may check on which specific logs you want to receive here

http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/logmsgs.html

and you may enable the logging 113004 for example

logging message 113004

View solution in original post

9 Replies 9

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Waseem,

configuring a syslog server and an adeguate level of logging should be enough.

Kiwi syslog is a good syslog server that we use and it should be freeware

Hope to help

Giuseppe

hi Giuseppe

i have configured syslog server but i am unable to see any log. The following commands are entered under ASA 5550 for logging.

"logging on" , "logging host inside 10.101.5.199" Is there any other command in ASA required for proper logging?

you should also specify on which system log messages should be sent to the syslog server such as

logging timestamp

logging buffered debugging

logging trap debugging

logging asdm debugging

logging facility 21

http://www.cisco.com/en/US/docs/security/asa/asa72/system/message/logconf.html#wp1066629

Thanks for your reply, Actually i have configured ASA 5550 as a VPN server and all remote clients are connected to it. Actually i want only those logs which tells me which user connected time and logged off time.

Thanks

you may check on which specific logs you want to receive here

http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/logmsgs.html

and you may enable the logging 113004 for example

logging message 113004

hi,

one thing , how can i filter the log. "logging message " will enable or disable the log for that event id. i only want log to appear on syslog with event id e.g 113004.

logging message level <0-7>

is that what you are looking for?

hi,

actually i only want log for vpn nothing else. i have configured ASA5550 as a vpn server and my remote user and connected to it using cisco vpn clients. just want login time and logout time in syslog nothing else.

im not sure of which of these logs you are looking to filter

113019

721018

721019

722007

722009

722012

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card