Re: ASA accouting through ACS for the VPN access

Roughly how many user accounts do you have?

Regards

Farrukh

On Tue, Feb 9, 2010 at 9:40 AM, CCIE <ccie_at_axizo.com> wrote:

> Very bad, because doing it at SYSLOG server will not be connected to the
> username? I was thinking to have record per username.
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> Farrukh Haroon
> Sent: Monday, February 08, 2010 9:05 PM
> To: CCIE
> Cc: groupstudy
> Subject: Re: ASA accouting through ACS for the VPN access
>
> ACS won't help you that much ..... you could make ACLs for the VPN users
> (and enable logging on it). Then analyze them using any syslog analyzer.
>
> Newer ASA versions also support netflow, that might help as well.
>
> Regards
>
> Farrukh
>
> On Mon, Feb 8, 2010 at 9:40 PM, CCIE <ccie_at_axizo.com> wrote:
>
> > Hi,
> >
> >
> >
> > I have ACS 4.2 and I would like to utilize it to log the accessed servers
> > and services for the Easy VPN remote that connect through my ASA 7.2, I
> > enabled accounting at the tunnel group setting, and I get accounting of
> the
> > start and stop of the VPN sessions, but I need more than just a start and
> > stop for the VPN access, I want accounting of the accessed services and
> > server while the are connected through the VPN.
> >
> >
> > If anybody have the solution and sure of that I can pay him for that.
> >
> >
> >
> > Regards,
> >
> > Amin
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature
> database 4847 (20100208) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature
> database 4849 (20100208) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com

Blogs and organic groups at http://www.ccie.net
Received on Tue Feb 09 2010 - 10:03:19 ART