cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
687
Views
0
Helpful
1
Replies

VPN Sessions and Syslog

thomasdmelvin
Level 1
Level 1

Okay, I've checked a number of places but no luck. Here's what I'm trying to do. We have folks logging onto to both an SSL VPN and AnyConnect VPN on our Cisco ASA 5510. I have a Syslog server setup, and sending messages to the syslog server. I'm trying to capture just the messages for users who logon and logoff the sessions [both successful and unsuccessful, doesn't need to be that granular].

Where do I set that up on the ASA? Is there a way to just capture those sessions?

Thanks in advance!!!

1 Reply 1

Collin Clark
VIP Alumni
VIP Alumni

You have to log at the level (or above) that logs sessions. You can then filter the log for just those sessions.

The logging level is 5 (notifcations)

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#use

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: