Richard

Perhaps there is some aspect of your question that I am not understanding. But in my experience the log messages on the ASA5500 show show Remote Access VPN session creation in a way that is similar to what is logged from the 3000 series concentrators.

HTH

Rick

Thanks Rick,

Maybe the 5510 is not configured as it should be to do what I am asking.

I can see the RA VPN when looking in the ASDM.

Also, there is an option for accounting in the ASA for the ra tunnel group.

Would this allow me to log RA activity to the TACACS server?

Richard

I have not used and have not really looked very much at the accounting option on the ASA so can not speak to this directly. But assuming that the accounting on the ASA is implemented similar to the way it is in IOS I would think that it should be possible to send accounting records to the TACACS server to show VPN activity.

HTH

Rick