IPS on 887 Router

[rgs_000000]

I am about to install an 887 for a client and he wants to know if he can get reports of all successful VPN logons, so he can see who has been on the network. What information is available from IPS logs on an 887?

Alternatively, what information could he get from IDS on an ASA?

[Jennifer Halim · Accepted solution]

IPS is not design to provide logs for successful VPN connections. Logs of successfully VPN connections can be gathered through syslog, and you can send the syslog messages to an external syslog server.

Here is the doc for your reference:

http://www.cisco.com/en/US/partner/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps6659/prod_white_paper0900aecd803fc77b.html

Similarly IPS on ASA is design for Intrusion Prevention when specific traffic matches the IPS signature. Here is more information on IPS for your reference:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/data_sheet_c78-459036_ps4077_Products_Data_Sheet.html

Hope that helps.

[rgs_000000]

Thanks halijenn, that sounds like the answer. I can't reach the document you linked to but I'll check out syslog.