Monitoring VPN Usage with ASDM

You can monitor the VPN client connections from three different sources:

• VPN Client | Statistics panel

• Monitor VPN statistics from ASDM

• Graph VPN statistics from ASDM

VPN Client | Statistics Panel

To view VPN statistics of a VPN client from the PC, follow these steps:

Step 1.	Ensure that the client has established a VPN tunnel to the ASA/PIX Security Appliance.
Step 2.	Click the VPN client on the PC's toolbar.
Step 3.	Choose Statistics from the Status pull-down menu.

This displays the panel shown in Figure 11-13.

This panel displays the IP addresses of your client, packets in and out, connect information, and encryption protocol information.

Monitor VPN Statistics from ASDM

To view the VPN tunnel information from the ASA/PIX Security Appliance, you need to view two ASDM sections:

• Monitor VPN Statistics

• Monitor VPN Connection Graphs

The first option, Monitor VPN Statistics, is the more powerful of the two. For all tunnels terminating on the ASA/PIX Security Appliance, you can view the following:

• Username of the connection

• Tunnel group name of the connection

• IP address information

• Protocol encryption information

• Login time duration

By clicking Details, you can see the same information just mentioned as well as the following:

• Bytes in and bytes out

• Full session information, including IKE parameters and ports used

• Access lists applied to the sessions

• IKE and IPSec parameters

In addition to showing VPN statistics, the VPN Sessions panel enables you to perform some management of the VPN sessions. Various buttons on this panel enable you to control the VPN connections, as follows:

• Log out a VPN tunnel

• Ping a client with an established tunnel

• Log out a tunnel by username, IP address, tunnel group, or protocol

Figure 11-15 show the Sessions Panel.

Figure 11-15. VPN Statistics Session Panel

You can graph VPN tunnel statistics by navigating to Monitor > Features > VPN > VPN Statistics > IPSec Tunnels.

Step 1.	Click the two entries in the Graph panel, IPSec Active Tunnels and IKE Active Tunnels.
Step 2.	Click Add.
Step 3.	Click Show Graphs.

This view shows you the number of active tunnels and is updated every 10 seconds. (See Figure 11-16.)

Figure 11-16. VPN Session Graph Panel