We have a single ASA 5505 which we are trying to use to find problem computer(s) that are soaking up the internet bandwidth every few days. The internet bandwidth gets choked out so no other clients can use it. This issue happens every few days, so we believe it's a scheduled program, but we could be wrong.
When the above issues occurs, using the ASA home page, I can see our 'outside interface traffic usage' spikes and continues in this spiked mode for about 10-15 minutes.
Using the ASA 5505, what are the steps necessary to figure out which internal IP addresses are consuming the bulk of the internet bandwidth?
One method is to use the 'show connections' command on your ASA. This will provide to you all of the connections established.
Copy and paste this output into your preferred text editor (Notepad++) and you can massage the data to place into Excel. Essentially look at the 'bytes' counter and you can narrow down the IPs using the most data.
A VPN or Virtual Private Network is a secure network over an unsecure
environment like internet. The VPN allows the remote clients to access
the internal network resources (private network) over the Internet
(public). These are the most common VPN article...
ISA500 series small business integrated security appliances can be
accessed, monitored and managed remotely. The below articles will give
you an insight of remote administration settings on ISA500 series
devicesCisco OnPlus Settings on ISA500 Series Integ...
Captive portal is an additional authentication step that can used for
both guests and authenticated users. Clients will see a special web page
for authentication purposes before they are allowed to use the internet
normally. Captive portal makes use of th...