cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 13

Active Users VPN Report on Cisco ASA

I'm having trouble creating a report on three of our Cisco ASAs to report the Active Users on Remote VPN.  I can see the stats on the details page, but I'm not able to get anything back either in a chart or table on the report writer. I'm closing it to report data on ASA node over the last 24 hours and then doing a Node Name match on the three nodes using an OR filter.  On the table I'm selecting "Active Users".  When I preview the report it comes back with a "activity not found".

Has anyone got it to work?

0 Kudos
3 Replies
Level 16

Try this post

https://thwack.solarwinds.com/t5/NPM-Discussions/Monitoring-used-vs-available-Remote-VPN-users-on-Ci...

 

There are some other similar ones as well

 

Below is the Legacy Custom Poller 

Save code in the ** below as CiscoASANumberOfSessions.UnDP then import it on your Orion server, not the web.

*******************

<?xml version="1.0" encoding="utf-8"?>
<CustomPollers version="9.0">
<CustomPoller UniqueName="CiscoASANumberOfSessions" Description="The number of currently active sessions. &#xD;&#xA; &#xD;&#xA; A session is a connection terminating on the managed &#xD;&#xA; entity which has been established to provide remote &#xD;&#xA; access connectivity to a user. A session is said to be &#xD;&#xA; 'active' if it is ready to carry application traffic &#xD;&#xA; between the user and the managed entity. A session which &#xD;&#xA; is not active is defined to be 'dormant'." OID="1.3.6.1.4.1.9.9.392.1.3.1" MIB="CISCO-REMOTE-ACCESS-MONITOR-MIB:crasNumSessions" SNMPGetType="GetNext" NetObjectPrefix="N" GroupName="Cisco ASA VPN" PollerType="R" Parser="Gauge" IncludeHistory="True" Unit="" TimeUnitId="0" TimeUnitQuantity="0" DefaultDisplayTimeUnitId="0" Formula="" LabelType="" LabelDetail="">
<Enumerations />
</CustomPoller>
<CustomPoller UniqueName="CiscoASANumberOfUsers" Description="The number of users who have active sessions." OID="1.3.6.1.4.1.9.9.392.1.3.3" MIB="CISCO-REMOTE-ACCESS-MONITOR-MIB:crasNumUsers" SNMPGetType="GetNext" NetObjectPrefix="N" GroupName="Cisco ASA VPN" PollerType="R" Parser="Gauge" IncludeHistory="True" Unit="" TimeUnitId="0" TimeUnitQuantity="0" DefaultDisplayTimeUnitId="0" Formula="" LabelType="" LabelDetail="">
<Enumerations />
</CustomPoller>
</CustomPollers>

******************

Here is the SWQL query that works with that custom poller:

SELECT TOP 10000 DisplayName, NodeID, AssignmentName, CurrentValue, ID, CustomPollerName

FROM Orion.NPM.CustomPollerAssignmentOnNode

Where DisplayName LIKE 'CiscoASANumberOfSessions'

 

0 Kudos
Level 12

I copied the out of the box report:"VPN Remote Access Tunnel History - Last 24 Hours"

And added "session state = 1'.

monitoringlife_0-1585598967401.png

 

0 Kudos
Level 13

I am looking more for a count which is what I have on a PerfStack dashboard I made.  I have the OID that is referenced in that link you posted and had no problem getting a report created for that.  I just can't seem to get a chart or a table with the data that is on this PerfStack dashboard.

bharris1_0-1585603905201.png

 

0 Kudos