Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Monitoring SSL VPN Connections

Hi,

Was wondering if I could get SSL VPN stats from our Cisco5520 Firewall? I would like to be able to report on trending for the last 6 monthes such as: the amount of people logged and showing how long they are logged in, amount of traffic and what kind of traffic?

Is this possible and would I have to enable Netflow on the ASA Firewall.

Thank you, Pat.

Find more posts tagged with

Reporting

anyconnect

asa5520

Accepted answers

All comments

danielleh

These might be of some help:

http://thwack.solarwinds.com/message/74032#74032

http://thwack.solarwinds.com/docs/DOC-167469

ma_pmchenry

Danielle,

I'm very new to SolarWinds - My boss just asked me to find a way to monitor AnyConnect trending as far as amount of people connected, bandwidth usage over time.

Where would I apply this script?

Also, this script seems to monitor concurrent sessions and not trending.

Thank you, Pat.

danielleh

I'm going to move this over to the Report Lab where a lot of our Script/Report Guru's hang out. They might be able to better help you here.

Sohail.Bhamani

You will need 2 things to get this going. First, you will need to create and apply Universal Device Pollers (UnDP's) to gather the number of users logged in over a specific type of VPN on the ASA. To get the amount and type of bandwidth, you will need to implement Netflow exporting from your ASA. The combination of these will definitely provide what you are being asked for.

Sohail Bhamani

Loop1 Systems

http://www.loop1systems.com

surgery

You need to find the right OIDs for your device. I use these to monitor our Cisco VPN concentrators, they may work for your device as well.

ftp://ftp.cisco.com/pub/mibs/oid/ALTIGA-SESSION-STATS-MIB.oid

Same thing as the last poster, you need to get familiar with the Universal Device Poller. Once you search with these OIDs, it should show you what you are looking for. Here is what I use to monitor the number of active sessions.

ma_pmchenry

I'm really new to SolarWinds. Is there a doc that might help me understand the steps needed to set this up?

BTW, where do I find the Universal Device Poller?

Thanks, Pat.

rjnicholson

The UnDP can be accessed from the main SW server. Under All Programs>SolarWinds Orion>Network Performance Monitor.

Once you have built the UnDP that you need you can assign it to a node there, or back in the Web front end under the Node Details page of the Node you want to assign the poller too.

ma_pmchenry

Oh - so, the UnDP needs to be configured on the server and not the web front end? When the UnDP is configured, I can assign the UnDP to a node - such as a FW?

With the right UnDP assigned to the FW and Netflow also configured on the FW, I should be able to get trending for SSL VPN connections. Would this trending be graphed in SolarWinds?

What kind of information does you OID parse?

Is there a list of OIDs I can find somewhere?

Thank you, Pat.

rjnicholson

Yes, you need to use the UnDP app on the Orion server to create the UnDP pollers that you want first. Once created they will be added to that section of the web front end and you can drill do a node and add the new pollers. You should be able to assign the pollers to nodes from the UnDP app as well, but as I said once you create them you will see them in the Web Front End.

tkellar

I got this to work. Actually, really cool. Here is the deal.

Go to Orion Universal Device Poller. Add a new sensor and use OID 1.3.6.1.4.1.9.9.392.1.3.35.0. Make sure your MIB Value Type is Raw Value, Format is None, and SNMP Get Type is GET. At that point, add your firewalls of interest to the poller.

Go to your Solarwinds view of interest and add a "Custom Object Resource". Give it your title, choose your node, and for Select object resource, I chose Universal Device Poller - Linear Guage. Set your gauge maximum value to the maximum number of SSL-VPNs you have licensed. Set your style of gauge and off you go. It will now be part of your view.

The gauge will show you both your number of SSL-VPN users graphically on the gauge as well as a number of your currently logged in SSL-VPN users.