Re: Good tool for reporting real-time and trend stats for multiple VPN 3000 concentrators?

I just started working with Concentrators in production this past year
and I'm still flabergasted that enterprise level VPN appliances don't
have reporting worth a damn. The only rpeorting is who is logged in
at this second which is barely useful.

We have the same issue and someone here is doing a home made script to
cull the syslogs and generate a DB of sessions.


I have to say... Nortel Contivity back in 2002 had built in history
(multiple months) and reporting right on the device. Unlike Cisco's
their redundant pairs also maintained a sync'd config. I can't believe
I'm supposed to manually maintain sync'd configs between redundant
nodes. I've becoming increasingly aware that as Cisco absorbs more
and more companies to grow markets and remain "competitive" they seem
to slip further away from building products that fit even basic
customer needs.



"Heath Roberts" <htroberts@xxxxxxxxx> wrote:

>Can anyone point me to a good tool that can provide near-real-time and
>trend stats for multiple VPN 3000 concentrators?
>
>Let's say that I have a cluster of concentrators at a site in D.C.,
>another cluster in San Diego, and one in Paris. I'd like to know at any
>given time how many total users are connected, and be able to drill
>down by site (for example 12000 total users connected, 6000 of them are
>in Paris, 2000 are on one concentrator, and 4000 are on the other).
>
>The trending would mostly be used to show usage patterns--my Paris
>users connect early in the morning until noon, but San Diego users
>connect all day Saturday. That sort of thing.
>
>Having the output on a web page would be ideal.
>
>I've called Cisco, and it seems like they listened to my request, and
>sent me literature on their syslog appliance that can be configured to
>send alarms, but provides no reporting function like what I've
>described, at least not that I can see from the literature. If
>someone's used one of these and can comment I'd appreciate that as
>well.
>
>I've looked at sawmill for analyzing syslogs, and I suspect it could be
>made to do what I need, but I wonder if there are other
>parsers/reporting tools that are better suited to the 3000-series
>concentrators out of the box.
>
>Thanks,
>Heath

DiGiTAL_ViNYL (no email)
.