LAN to LAN Tunnel - Need Accounting of who accesses and when

asafayan · ‎07-31-2009

Is there anyway to provide accounting information about what user or what source / destination IP traverses a L2L tunnel ?

Essentially I'm trying to provide information about when our tunnels are enabled and when they are disabled and who accesses what across the tunnels.

Can this be done natively on an ASA running version 8.x?

JORGE RODRIGUEZ · ‎08-01-2009

There are several tools out there that can collect that information for either RA VPN, L2l VPN or just regular traffic.

I personally use Firewall Analizer from Manage enginen, provides granular information on any traffic traversing firewall.

Also Netflow feature was just introduced in latest 8.2.1 code release , this feature is part of the code so it is free, you can try this , there are also freeware netflow collectors out there to set it up. http://www.cisco.com/en/US/docs/security/asa/asa82/netflow/netflow.html

Freeware netflow collectors

Regards

Jorge Rodriguez