Hello,
I am trying to set up my Nagios XI server. I would like to be able to track Remote Access VPN Sessions with Nagios XI. I would like to see which user is connecting and what time they connect and disconnect from the network. So far I have been unsuccessful in my attempts and thought I would post in the forum.
These are the things I have tried. I tried running the SNMP Walk wizard to see if I could see if any OID's listed would be applicable. I did not see any that looked like VPN Sessions. I then tried running the SNMP wizard and I did see an OID for VPN Sessions, but It did not work with my device. I was wondering if there are any other Nagios XI users out there that are monitoring their VPN Traffic to see who is connecting to the firewall.
Any assistance provided will be very much appreciated.
Cisco ASA 5510 Remote Access VPN Sessions
-
slansing
- Posts: 7698
- Joined: Mon Apr 23, 2012 4:28 pm
- Location: Travelling through time and space...
Re: Cisco ASA 5510 Remote Access VPN Sessions
Have you taken a look at these plugins on the exchange?:
http://exchange.nagios.org/index.php?op ... =asa%20vpn
http://exchange.nagios.org/index.php?op ... =asa%20vpn
Re: Cisco ASA 5510 Remote Access VPN Sessions
I believe these only check how many active connections are made. I would like to be able to track the usernames that are attaching to the firewall with connect and disconnect times.
-
sreinhardt
- -fno-stack-protector
- Posts: 4366
- Joined: Mon Nov 19, 2012 12:10 pm
Re: Cisco ASA 5510 Remote Access VPN Sessions
I highly doubt that the snmp daemon would provide the information to get requests. You might be able to find this via snmp traps sent from the cisco device, however I do not know if this is even possible. It would effectively send you a trap upon connect or disconnect of a user, potentially with the username. You would have to look into the cisco documentation for this though.
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.