Monitoring VPN activity

Hello all,
I have couple of IKE/IPSEC VPN client connexions enabled over an ASA 5515 and I would like to log VPN activity (user login name, connection time and duration, ...) like information I can see going to "Monitoring >> VPN >> VPN Statistics >> Sessions.
Thanks for you help
Regards,

Thanks Jeff.
I use Syslog Wacther.
I have looked for "%ASA-4-722051" or "%ASA-4-113019" but I will get 113019 and it reffers to a disconnection ... :/
I will check around for the global list of identifiers ... and let you know

Similar Messages

How i use OEM 12c to monitor Microsoft Active directory.

Hi,
How i use OEM 12c to monitor Microsoft Active directory.Please assist me on this.
Thanks,
Sagar

Hi,
The fundamental problem with this scenario is that you have non-failover capable modules in a failover chassis - think of the ASA failover pair as one device and the IPS modules as two completely separate devices.
Then, as already mentioned, add only the primary ASA. (The secondary will never be passing traffic in standby mode so it's not actually needed in MARS) Then, with the first IPS module you can add it as a module of the ASA or as a standalone device (MARS doesn't care). With the second IPS module the only option is to add it as a separate device anyway.
In a failover scenario the ASA's swap IP's but the IPS's don't so whereas you'll only ever get messages from the active ASA you'll get messages from both IPS IP's depending on which one happens to be in the active ASA at the time.
Don't forget that you have to manually replicate all IPS configuration every time you make a change.
HTH
Andrew.

Monitoring VPN Clients

Hi guys,
I have a need to monitor VPN clients where I have TMG 2010 as my VPN server.
I just want to know from where clients are initiated their vpns.I mean their vlaid IPs not which TMG gives them.
Is there any third party software to do this?
Thanks

Hi,
When configuring the VPN connection on the TMG server, which kind of IP address assignment method you had selected?
If you select the static address pool, then the remote VPN clients would obtain IP addresses from this range.
If you have a DHCP server and select DHCP option, then
TMG firewall will request 10 IP addresses from the DHCP scope each time to assign its VPN interface an IP address and to assign IP addresses to the VPN clients.
More information:
Configuring VPN address assignment
Best regards,
Susie

Why won't Apple allow an app like Covenant Eyes to monitor internet activity on the Safari browser on iOS?

Why won't Apple allow an app like Covenant Eyes to monitor internet activity on the Safari browser on iOS?

Yes, that is the app. It is used to monitor your internet activity, but because Apple won't allow an app like Covenant Eyes to monitor the Safari browser or any other browsers the Covenant Eyes app has to be its own browser which causes some issues. You can't click on a link and have it open because the iOS tries to open Safari by default when you do that.
I'm just wondering if there is anywhere on Apple's website that discusses this type of thing, why they don't allow an app like Covenant Eyes to monitor the Safari browser. The Covenant Eyes program for Macs will monitor internet activity on the computer.

CF8 cfthread, server monitor, and active threads

When I run this code:
cfthread
part III or any cfthread without a thread join and then go to
the CF Administrator -> Server Monitor -> Statistics ->
Active ColdFusion Threads, I don't see the threads ever going away.
They just build and build everytime I run it. I can get it to
go all the way up to 400+ threads and stay there untill I restart
Jrun. I think this is a monitor issue because I'd hate to think
those threads are tied up and still active.
Thoughts?

Neo,
I have noticed the same thing. Now for the odd part. If you
click the 'start monitoring' button and then run your thread test,
the threads don't appear in the Active Coldfusion Thread report!
When running our application, I noticed the Coldfusion thread
count getting up to 80,000+ threads in the span of a couple of
hours. If we can't figure out what is causing this, we are going to
downgrade back to CF7

HT4865 How does icloud monitor malicious activity?

How does icloud monitor malicious activity?

You can use the reports function in VMS SecMon to do this. Cook up a report that looks for the OUT source direction (source packets with IP's NOT internal to your network - You DID set the IN variable, right?) then add in the sigs you have shunning enabled (do this by sig number, it's a LOT easier), select the sensor you want to report on, and you're done. If you want you can have SecMon Email the reports to you.

Monitoring web activity

Hello,
I am looking to write a java app that can monitor web activity, for example, what websites a user visited etc.....
Any API that can help?
The applications needs to be running in the background without the user knowing!
thanks alot
Bobby

write a filter that logs such information.
or use network monitoring tools:
http://www.slac.stanford.edu/xorg/nmtf/nmtf-tools.html
%

Tool for monitoring CPU activity

hi all
is there any tool beside "top" that can monitor CPU activity in mi-range servers as SUNFIRE 4800 ?
Because i need time slot to know the peak time of the CPU and its activity in real time
P.S : i have Solaris 8 and Solaris 9
Regards
Timely

Just to amuse yourself run sar and mpstat and prstat/top against the same time-slice on a multi-proc machine. I think you'll be surprised at how inaccurate sar is.
Some portions of Solaris are very old and don't get updated. sar appears to be one of them.

SNMP Monitoring VPN 3000

I'm monitoring a set of 3060 concentrators using SNMP but all I'm getting is bandwidth. I would like to know if I can get more information from it like CPU, Load and what ever else I can get from it? What application do you think I would be able to get more information from it.
Thanks in advanced.

Ruben,
The MIBs for the concentrator is here:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml . The link takes you to the page where you can get to all the Cisco MIBs. I found the OIDs that I wanted to monitor which were the following:
.1.3.6.1.4.1.3076.2.1.2.17.1.6.0 - Peak VPN Users
.1.3.6.1.4.1.3076.2.1.2.17.1.9.0 - Active Sessions
What you probably want to see as well is active Site-To-Site, you can use this OID:
.1.3.6.1.4.1.3076.2.1.2.17.1.7.0 - Active L2L Sessions
In order to find the OIDs, use the GetIF utility and download the MIB package they have. It is a large zip file and contains all these MIBs too. Use the MIB walker and go down the tree to .iso.org.dod.internet.private.enterprises.altigaRoot.altigaGeneric.altigaMib
Javier

How to Create and adjust masks with SDI output or Dual monitor output activated?

Hi all Speedgrade community.
For me one of the biggest problems I constantly encounter is managing masks within speed grade.
The tools are great, but if your using and external reference monitor for grading there is no way you can manage
masks and see what your doing on that "external" screen. Is there a way of activating dual screen or ddi output and keeping
the viewer active in the GUI?
When I know I'm going to be managing a lot of fine tuning grading, I usually always switch to Scratch or Resolve, and that breaks my Adobe CC round tripping workflow
AE<-->PP<-->SG
Thanks for any help.
KR
Leigh
iMac 27"
Aja IO 4K
DreamColor Z27X
HDLink 3D DisplayPort
Wacom Intuos

Hi Fran
Thanks for your response.
Is it just me, or does the pointer, when sent over to the SDI output, not respond as well
as when it's on the GUI?
Anyway, I'm quit confident we'll see an update to the way video is routed within Speedgrade
in a near future.
Leigh

Monitor Internet activity.

I am having problems with the recorded usage via my ISP. Is there any way I can log all on-line activity from my computer which can then be checked against the ISP's usage record? It could be that someone is deliberately or accidentally logging into my wireless router. Any suggestions would be welcome.

Lots of apps can do that, just Google "monitor isp usage mac".
Here's one and some others...
EDIT: This one looks promising too.
-mj
Message was edited by: macjack

How to monitor the Activation process of a request in DSO

Hi all,
I have loaded the data ( 7 million) records in DSO as a new request. I have clicked on the activation button.
Can any one tell me where can we check the status of this activation process of this request?
When clicked on monitor or logs button it shows me all as status green, but not able to figure out where to check the status of activation process.(the data is still not activated )
any help would be great.
Thanks in advance.
Regds,
Maddy

Hi,
There are a couple of places where you can see the activation progress.
1) To start with SM37 job log > (give BI_PROCESS_ODSACTIVAT or BI_ODSA*)
and it should give you the details about the activation job. If its active make sure that the job log is getting updated at frequent intervals.
2) For very huge number of records SM37 job log may not get update frequently. In that case you have a workaround.
Go to contents > Active Data table > No. of entries > This will keep on increasing at frequent intervals.
3) SM66 > Get the job details (server name PID etc from SM37) and see in SM66 if the job is running or not. See if its accessing/updating some tables or is not doing anything at all.
4) Go to Activate button in Target > Request tab. Inside you can see a job log button. It will also show some log regarding the last activation.
Thanks,
JituK

What's the best way to monitor VPN connection setup in a mesh?

We have 24 Cisco ASA connected in a mesh using IPsec VPN tunnels. From our hub location we have Sitescope monitoring each firewall and VPN tunnel to that firewall by ping its inside interface. That works great from the hub location and is more of a hub and spoke model but this is a meshed VPN and I need to monitor the other sites. I don't want to put Sitescope servers in all locations nor would I do that. What are people using these days to monitor thier VPN tunnels? How do you know when a location can't talk to another location? Looking to be proactive here and not wait for an office to notify me that a tunnel is down.
Thanks for the help.

Anyone??
Sent from Cisco Technical Support iPhone App

I upgraded to Mavericks and my iMac monitor goes black randomly, but my attached cinema monitor stays active. I can fix it by putting it to sleep and waking it up again. But often it happens immediately after.

I have a 30in cinema display attached to my iMac and the iMac screen randomly goes black while the cinema stays active. I can put it to sleep and log back in which fixes it, but often it happens again immediately after. Sometimes it happens so quickly I can't even finishing logging in! I'd like to know if this is a Mavericks issue and I will roll my machine back. Thank you!

RocknOats
Wanted to update you on my situation with this.
So far 8 hours have gone by and I have not had a screen blackout.
FIRST I did the Hardware Test. TWICE on the extended test, the instructions on the KB Article explain. It took almost 3 hours, but while the test was running, both times, my computer screen did not go black.
I did get an error message, both times. Different each time. I looked up both of the error messages on discussion boards. Lots of conflicting info
One good thread said my first error was that my hard drive was bad and would probably fail.
The next error message I researched said that a fan was bad or needed replacement.
(information comes from other folks on discussion boards, not from Apple or technician)
Not sure what exactly those 2 error messages indicate but I followed a thread where someone found a solution by doing the following. So far it's worked.
After Hardware Test I did a shutdown and an SMC resest. Unplugged computer power source from wall and computer for about 10 minutes.
Finally after a restart I downloaded "SMC Fan Control" (CNET Downloads has a nice safe copy you can download)
There is a temperature monitor and from what I've read so far, keeping the CPU temperature under 50˚C is ideal. Making sure your fans and computer is in a well ventilated area/room too of course.
The SMC Fan Control helps you set your own speeds on the fans and so far everything has been going normal.

How can I monitor the active access point + data c...

My privider (o2 Germany) requires me to use different access points (APN, proxy) on my phone (N80) depending on the type of browsing I want do do (WAP vs. "normal" access), and each of them has a "high cost trap" if I use the wrong one for the particular service.
Very annoying - up to the point that I consider not using the phone for online access at all because I'm so scared to run into uncontrollably high fees.
Anyways. I wonder if there is add-on software for my phone that helps me monitor my data connection, i.e.:
* show me the currently used access point at the top of the display (yes, I know I can go into some deep menus to look it up, but that's not very helpful or even easy to use)
* automatically disconnect when the conn is idle for a while (One of the data modes is time-based, meaning I do not want to have it open all the time by accident)
Currently, all I can see at the top of the display is that I have a data connection at all, but that does not give me enough information to know I'm in the right mode for what I'm doing.
Thomas

You can force a disconnect by pressing the red/hangup key for a couple of seconds when the phone is in the standby state.
And in menu > Tools > Settings > Connection > Packet data change the setting "Packet data conn." to "When needed" and leave the "Access point" setting there to "None".
When you or apps on your phone are not doing any data transfer, then regardless of whether it is a WAP or "full" Internet packet data connection, you should not cumulate any charges.
You can also move the Connection Manager app from the Tools submenu to the main menu, or even to the Active standby apps list (or the softkeys) for quicker access. No need to deep dive into menus for it then.
And for individual apps, you can usually set the default access point to whatever is best to use for that particular app. For the browsers ("Web" and "Services") you can also make them ask you to pick the access point every time you connect.

Monitoring VPN activity

Similar Messages

Maybe you are looking for