VPN Logging & IDS

[istechfcs]

We have a PIX 6.3. I use kiwi syslog to log messages. But for VPN info, all it will show is that the VPN user successfully authenticated. How can I tell when someone is unsucessfully attempted to log in for IDS purposes?

Also, in the PDM, it will show me how many users are logged in, but not WHO or WHICH users. Is there a way to remedy that?

Also, where can I go to boot someone off of the VPN that is logged on?

 

[vlf]

Upgrade to 7.x is your only hope. Just make sure to also install ADSM.

I upgraded one of my firewalls recently. Everything went really smoothly. The only problem that I had was that I had DNS entries for each of my VPN groups. Version 7 acts more like a concentrator, so you have to go in to the default group settings and set up the DNS and WINS info.