cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
474
Views
0
Helpful
1
Replies

How to log VPN users

asmith1972
Level 1
Level 1

Hello We are using Cisco ASA 5520 that we use for our user to VPN into us. We do have it setup to log things to a syslog server.

What we want to do is look into some logs that can tell us when users logged in our network via VPN and when they disconnected. We want to be able to look back at hostorical data.

Like I said we log things from the ASA into a Syslog server but we do not know if if VPN logs are put in here? If so what do we look for or do we have to turn on somewhere VPN logging?

1 Reply 1

andrew.prince
Level 10
Level 10

In your syslog server filter/search for message ID's:-

%ASA-5-713120 & %ASA-5-713050

%ASA-5-713120 = Sucessful Phase 2 VPN completion and setup.

%ASA-5-713050 = terminated VPN session

HTH>

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: