Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

70-11
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 70 Monitoring VPN
VPN Statistics
Global IKE/IPSec Statistics
This pane displays the global IKE/IPSec statistics for currently active user and administrator sessions on
the adaptive security appliance. Each row in the table represents one global statistic.
Fields
• Show Statistics For—Selects a specific protocol, IKE Protocol (the default) or IPSec Protocol.
• Statistics—Shows the statistics for all the protocols in use by currently active sessions.
– Statistic—Lists the name of the statistical variable. The contents of this column vary, depending
upon the value you select for the Show Statistics For parameter.
– Value—The numerical value for the statistic in this row.
• Refresh—Updates the statistics shown in the Global IKE/IPSec Statistics table.
Modes
The following table shows the modes in which this feature is available:
NAC Session Summary
The NAC Session Summary pane lets you view the active and cumulative Network Admission Control
sessions.
Fields
• Active NAC Sessions—General statistics about remote peers that are subject to posture validation.
• Cumulative NAC Sessions—General statistics about remote peers that are or have been subject to
posture validation.
• Accepted—Number of peers that passed posture validation and have been granted an access policy
by an Access Control Server.
• Rejected—Number of peers that failed posture validation or were not granted an access policy by
an Access Control Server.
• Exempted—Number of peers that are not subject to posture validation because they match an entry
in the Posture Validation Exception list configured on the adaptive security appliance.
• Non-responsive—Number of peers not responsive to Extensible Authentication Protocol (EAP) over
UDP requests for posture validation. Peers on which no CTA is running do not respond to these
requests. If the adaptive security appliance configuration supports clientless hosts, the Access
Control Server downloads the access policy associated with clientless hosts to the adaptive security
appliance for these peers. Otherwise, the adaptive security appliance assigns the NAC default policy.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English