Fresh Meadows, NY
I know that by using the ASDM, you can click on firewall, and then it will show you either 1 hour, 8 hour, or 24hour, of the top ten most active IP's going through the network either in or out, and separately, the most active ports.
I would also like to know if there was any way of monitoring specifically who is on what port and at what time, instead of waiting for a random IP to make it to the top ten, without even knowing what port that IP is really connected on. I know I cant use the line "sh nat | incl 3074" for example for the xBox, because it will only show me the static port forwarding I already have in place, it will never show me who is connected to that, and this is what I want to be able to see in real time.
reply to mocah
I'm not sure about monitoring SSH connections off the top of my head, but to view VPN connections via the command line you can use:
ASA# show vpn-sessiondb
I love this command.
Matt, CCIE Security, »www.wr-mem.com