My PIX 515E (running 6.5.4) is currently used to authenticate different VPN connections from users running Cisco VPN Clients. I would like to get a report of the users who connect to the PIX every day. My idea was to monitor the syslog and send an alert when a specific string appears in the log (using kiwi syslog alert function) I checked the syslog but I only found information regarding
ISAKMP session connected ISAKMP Phase 1 SA created sa created
with no info regarding the group used to connect. This is not useful
How can I get the correct information in the syslog so I can recognize which user connected?
Otherwise, have you a better idea to get this kind of daily report?
Thanks