Cisco ASA 5505 Configuration Manual page 1592

VPN Statistics
Filter By—Specifies the type of sessions that the statistics in the following table represent.
•
–
–
–
–
The contents of the second table, also unlabeled, in this pane depend on the selection in the Filter By
list. In the following list, the first-level bullets show the Filter By selection, and the second-level bullets
show the column headings for this table.
Remote Access—Indicates that the values in this table relate to remote access (IPsec software and
•
hardware clients) traffic.
–
–
–
Note
–
–
–
–
IPSec Site-toSite—Indicates that the values in this table relate to LAN-to-LAN traffic.
•
–
–
–
Cisco ASA 5500 Series Configuration Guide using ASDM
70-4
Session type (unlabeled)—Designates the session type that you want to monitor. The default is
IPSec Remote Access.
Session filter (unlabeled)—Designates which of the column heads in the following table to filter
on. The default is --All Sessions--.
Filter name (unlabeled)—Specifies the name of the filter to apply. If you specify --All
Sessions-- as the session filter list, this field is not available. For all other session filter
selections, this field cannot be blank.
Filter—Executes the filtering operation.
Username/Connection Profile—Shows the username or login name and the connection profile
(tunnel group) for the session. If the client is using a digital certificate for authentication, the
field shows the Subject CN or Subject OU from the certificate.
Group Policy Connection Profile—Displays the tunnel group policy connection profile for the
session.
Assigned IP Address/Public IP Address—Shows the private ("assigned") IP address assigned to
the remote client for this session. This is also known as the "inner" or "virtual" IP address, and
it lets the client appear to be a host on the private network. Also shows the Public IP address of
the client for this remote-access session. This is also known as the "outer" IP address. It is
typically assigned to the client by the ISP, and it lets the client function as a host on the public
network.
The Assigned IP Address field does not apply to Clientless SSL VPN sessions, as the ASA
(proxy) is the source of all traffic . For a hardward client session in Network Extension mode,
the Assigned IP address is the subnet of the hardware client's private/inside network interface.
Protocol/Encryption—Shows the protocol and the data encryption algorithm this session is using,
if any.
Login Time/Duration—Shows the date and time (MMM DD HH:MM:SS) that the session
logged in. and the length of the session. Time is displayed in 24-hour notation.
Client (Peer) Type/Version—Shows the type and software version number (for example, rel.
7.0_int 50) for connected clients, sorted by username.
Bytes Tx/Bytes Rx—Shows the total number of bytes transmitted to/received from the remote
peer or client by the adaptive security appliance.
Connection Profile/IP Address—Shows the name of the tunnel group and the IP address of the
peer.
Protocol/Encryption—Shows the protocol and the data encryption algorithm this session is using,
if any.
Login Time/Duration—Shows the date and time (MMM DD HH:MM:SS) that the session
logged in. and the length of the session. Time is displayed in 24-hour notation.
Chapter 70 Monitoring VPN
OL-20339-01