Cisco ASA 5505 Configuration Manual page 1594

VPN Statistics
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Sessions Details
The Session Details pane displays configuration settings, statistics, and state information about the
selected session.
The Remote Detailed table at the top of the Session Details pane displays the following columns:
•
•
•
•
•
•
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
70-6
Logout By—Chooses a criterion to use to filter the sessions to be logged out. If you choose any but
--All Sessions--, the box to the right of the Logout By list becomes active. If you choose the value
Protocol for Logout By, the box becomes a list, from which you can choose a protocol type to use
as the logout filter. The default value of this list is IPSec. For all choices other than Protocol, you
must supply an appropriate value in this column.
Logout Sessions—Ends all sessions that meet the specified Logout By criteria.
Refresh—Updates the screen and its data. The date and time indicate when the screen was last
updated.
Security Context
Transparent Single
—
•
Username—Shows the username or login name associated with the session. If the remote peer is
using a digital certificate for authentication, the field shows the Subject CN or Subject OU from the
certificate.
Group Policy and Tunnel Group—Group policy assigned to the session and the name of the tunnel
group upon which the session is established.
Assigned IP Address and Public IP Address—Private IP address assigned to the remote peer for this
session. Also called the inner or virtual IP address, the assigned IP address lets the remote peer
appear to be on the private network. The second field shows the public IP address of the remote
computer for this session. Also called the outer IP address, the public IP address is typically
assigned to the remote computer by the ISP. It lets the remote computer function as a host on the
public network.
Protocol/Encryption—Protocol and the data encryption algorithm this session is using, if any.
Login Time and Duration—Time and date of the session initialization, and the length of the session.
The session initialization time is in 24-hour notation.
Client Type and Version—Type and software version number (for example, rel. 7.0_int 50) of the client
on the remote computer.
Bytes Tx and Bytes Rx—Shows the total number of bytes transmitted to and received from the
remote peer by the adaptive security appliance.
NAC Result and Posture Token—The ASDM displays values in this column only if you configured
Network Admission Control on the adaptive security appliance.
The NAC Result shows one of the following values:
Accepted—The ACS successfully validated the posture of the remote host.
–
Multiple
Context System
— —
Chapter 70 Monitoring VPN
OL-20339-01