Using my Pix 515E as a VPN serving device, with users authenticating to my Cisco ACS appliance (connected to my active directory), I am able to see logs of successful and unsuccessful authentication attempts on the ACS. However, I have not yet (and maybe I'm missing something obvious here) been able to find a good way to translate currently connected hosts to who they authenticated as.
Marc Creviere
Marc Creviere