Can anyone point me to a good tool that can provide near-real-time and trend stats for multiple VPN 3000 concentrators?
Let's say that I have a cluster of concentrators at a site in D.C., another cluster in San Diego, and one in Paris. I'd like to know at any given time how many total users are connected, and be able to drill down by site (for example 12000 total users connected, 6000 of them are in Paris, 2000 are on one concentrator, and 4000 are on the other).
The trending would mostly be used to show usage patterns--my Paris users connect early in the morning until noon, but San Diego users connect all day Saturday. That sort of thing.
Having the output on a web page would be ideal.
I've called Cisco, and it seems like they listened to my request, and sent me literature on their syslog appliance that can be configured to send alarms, but provides no reporting function like what I've described, at least not that I can see from the literature. If someone's used one of these and can comment I'd appreciate that as well.
I've looked at sawmill for analyzing syslogs, and I suspect it could be made to do what I need, but I wonder if there are other parsers/reporting tools that are better suited to the 3000-series concentrators out of the box.