ASA VPN Accouting

[dnoc43]

I am using ASA 5510 to authenticate IPSec remote access clients. I would like to log all the login attempts to a syslog server. Is this possible?

[Collin Clark]

Yes you can. You will need to enable logging to the syslog server at a minimum of level 5 (notifications).

logging enable

logging host inside [syslog server ip]

logging trap 5

Hope that helps.

[Hitesh Vinzoda]

You can also integrate ACS with ASA (if you have one). Create the Username on ACS and make ASA to authenticate users on ACS.

[Guillermo Soto Montemayor]

Hi Hitesh,

     I am doing Authentication to VPN Clients on ASA (8.2(1)) to a CS ACS 5.0, but I have not been able to to the Authorization and Accounting, do you have an idea on how doing this or any URL I can reference?.  Basicly we want that when a user is logged in via VPN Client, we can also "see" waht the user is doing, which resources it is accesssing, etc

Thanks and Best Regards,

memo