Cisco :: User Activity Logs On 2504 WLC?
Oct 16, 2012I want to secure our WLAN via Web Authentication with our new Cisco 2504 WLC. But where do i find user activity logs?
View 2 Replies
ADVERTISEMENT
Cisco :: Iron Port WSA-S670 Client Web Activity Logs
Jun 18, 2012how to get the web activity report of clients in Ironport WSA S670. I need each and every URL's visited by the exact clients.As of now i am able to download the client web activity report upto URL categories...but i need exact URL's accessed by the clients.
View 1 Replies View RelatedCisco :: 4400 WLC / WCS - Monitoring Lobby Admin User Activity
Jan 26, 2011We currently have about 8 WLC 4400 series controllers deployed around the company, one of these controllers is acting as an Achor controller for GUEST wifi access for visitors to the company, as a result of this we have many users with "LobbyAdmin" access to setup users.
We have recently introduced a Cisco WCS to manage these devices but its not fully implemented/active to see all WLC's.I need to be able to report on the LobbyAdmin users to see who is setting up accounts and for who etc. Currently access to the WLC/WCS is done via Local admin accounts. All accounts for the LobbyAdmin people are setup on our anchor controller.
I have added the anchor controller for this to the WCS system but when looking in Administration/AAA/Groups the LobbyAdmin groups shows No Members.Is there a way that i can import the Lobby Admin names from the anchor WLC to the WCS so i can do reports/audit checks on these users?
Cisco Wireless :: Activity Timeout In Aironet 1140 - User Gets Disconnected
Nov 30, 2011Users are facing issue since a long time now . Whenever user connected to wireless is idle say 10 -20 seconds he gets disconnected This happens for all the users and even Mac/Win 7 I changed Activity Timeout on AP and even rebooted but still when I do show dot11 associations all-client I see activity-timeout
Users don't get disconnected when there is continous flow of data its only when user is idle
When user disconnects and hit refersh it starts working again
Cisco AAA/Identity/Nac :: ACS V5.2 / Can Configure User Authentication Logs To Be Viewed On WCS
Jul 18, 2011I have some queries regarding on the report generation for on Cisco ACS v5.2.
1) Can we schedule to run a customized report on ACS and then email the report to the user?
2) Can we run a users authentication trend report based on the AD directory group rather than individual user.
3) Can we configure user authentication logs to be viewed on WCS.
Cisco AAA/Identity/Nac :: ACS 5.3 - External Proxy Service User Logs?
Apr 11, 2012We are currently using Cisco ACS 5.3.0.40.2. One of the Services Selection Policy it hosts is:
Receive Authentication request from a wireless controller for a wireless userIf the wireless user's username contains a particular domain suffix, the request is proxied to an external proxy server using an External Proxy service (configured for both local/remote accounting)On receiving an Acccess-Accept from the external proxy, the user is given access and ACS 5 will start logging account packets for the username (nothing appears in the RADIUS authentication logs - ACS 5 it seems doesn't log proxied authentication requests) The above setup works fine in most instances. We start to have problems when an external proxy server strips the domain suffix off the username in the Access-Accept packet e.g.
ACS 5 proxies an Access-Request to an external proxy server (with Username = someuser@somwhere.com)The external proxy replies with an Access-Accept (with Username = someuser)The user 'someuser' is given access but subsequent accounting attempts fail because their username (without the domain suffix) doesn't match the Service Selection PolicyIs there any way to get ACS 5.3 to log proxied authentication requests? If not, can I configure ACS 5.3 to use the username in the Access-Request packet (rather than the username in the Access-Accept packet) for accounting?
Cisco :: WLC 2504 QoS Per-user Bandwidth Contracts?
May 25, 2013does the cisco wlc 2504 (software release 7.4) support QoS per-user bandwidth contracts ? I only can see the default QoS profiles (gold, platinum...) i can't see the per-user bandwidth contract to modify it. shoud it be activated ?
View 3 Replies View RelatedCisco Wireless :: 2504 - User Not Getting DHCP IP Address?
Aug 25, 2012i have configured wlc 2504 .in that i have configured two interfaces.one is guest, 2nd is internal user, the pblm when user try to connect with that contain ssid user not getting ip address,
i have connected only one link between core to wlc on port 1.for guest interface i used port 4.but no physical link.
Cisco Wireless :: WLC 2504 - Guest User Life Time?
Sep 19, 2012Cant we create a guest user login with more than 30 days lifetime? In the lifetime field we can enter maximum 99 but it only allows up to 30
View 5 Replies View RelatedCisco Wireless :: 2504 And 1142N AP To Create Individual User Accounts Who Are Connected
Apr 20, 2011We are planning to setup a new WLAN using Cisco 2504 WLAN Controller and 1142N Access Point.Is it possible to create individual user accounts for the users those who all are connecting to this WLAN Network by using the 2504 WLAN Controller ?
View 11 Replies View RelatedCisco :: Configure WLC To Log Guest Activity To NGS?
Jul 27, 2012We presently have a guest wireless solution in place using 4400/5508 WLC controllers authenticating guests via a NAC Guest server. This has functioned well for the last year or so, but now our security team has requested that we begin logging guest activity. I already have RADIUS accounting set up on the WLAN configuration pointing to the NGS,I have added the NGS to the syslog set up on the controller (I have tried various syslog levels) but I am not receiving any guest activity info in the reports on the NGS. Any way for getting this data?
View 2 Replies View RelatedCisco Switches :: Sg 300-52 Constant Activity?
Apr 29, 2012we recently purchased a sg300-52. i was told i would need to setup a port trunk to connect it our main catalyst. However, i was able to connect a patch cable on the two devices and ping endpoint devices on both switches. I also noticed that the activity lights are constantly blinking. I'm not sure why. Is there something i can do to slow the activity light? it blicks constantly even in times of very low activity by the endpoint.
View 2 Replies View RelatedCisco AAA/Identity/Nac :: ACS 5.2 User Roles And Restricting User Access To Add Items?
Sep 22, 2011We are running ACS 5.2 patch 6 and want to restrict access for users to be able to add devices to the system.For example, admin person in site A can only add devices into the site A group and cannot see/access other sites groups.
View 1 Replies View RelatedCisco Firewall :: 5510 - Display User Message When User Connects Using AnyConnect Client?
Apr 20, 2009We are using an ASA 5510 and remote access (SSL VPN) using the AnyConnect client.
Is it possible to display a user message when a user connects using the AnyConnect client, matching a specific dynamic access policy? Can the message be displayed when the action is "Continue" rather than "Terminate"? I can't seem to get this to work and wondered if there was a LUA function to do this.
We have a DAP which gives a restricted ACL when the user's anti-virus is out of date, and I wanted to notify the user to update their anti-virus and reconnect.
Cisco Firewall :: Create Local User In ASA 5520 To Allow User To Use ASDM In Read-Only Mode?
Oct 10, 2011I want to create a local user in my Cisco ASA 5520 to allow the user to use the ASDM in Read-Only mode. I want the user to view the Dashboard only.
View 1 Replies View RelatedCisco :: Detect Botnet Activity From Metwork
Oct 7, 2012detect botnet acitivity from network point of view.
View 15 Replies View RelatedCisco Routers :: RV042 - Activity Monitor WAN 1 And 2
Jan 5, 2013I am using Bit meter (on Windows 7 64-bit) to measure up/down activity on the network adapter connected to the RV042 in load balancing mode. Is there a way I can, in real time, have a visual indication of up/down network activity on the WAN 1 and 2 port separately on the RV042?
View 1 Replies View RelatedCisco :: AP 1142 SSID Dropping Activity?
Aug 30, 2011I'm running a wpa2-secured guest ssid on a particular vlan that allows traffic to the web but restricts any access to internal network resources. It had been working fine for a couple of weeks, until the network started intermittenly dropping - at first I tried swapping channels and rebooting, but there has been no progress. I keep a running log at all times as long as the network is still active, but once it drops, the only message I'm getting is
'Line protocol on Interface Dot11Radio0, changed state to down'
My understanding would be that this is the same message logged when a user manually turns off the radio from a terminal window, is this correct? Or am I missing some basic troubleshooting steps?
Confusing Network Activity In Router Log
Aug 2, 2012I was examining my router's logs the other day and I noticed a recurring entry stating that my PC's IP address was sending packets to the IP 172.16.30.115 on port 80, and that the router was dropping them.Except for the fact that my home LAN uses the 192.168.1.0/24 network EXCLUSIVELY. That is all it has ever used since this router was set up, and the only other networks we have EVER used are 192.168.0.0/24 and 192.168.2.0/24. So why, I wondered, is my PC repeatedly sending (presumably) HTTP traffic to a private IP that is not and never has been on my network?I wasn't worried about what these connections might be doing, since I figured they couldn't do anything, but I was kind of concerned about what was generating this traffic in the first place. So I downloaded Wireshark and ran a capture for 30 minutes. Upon completion, I filtered results to show only packets that contained the IP 172.16.30.115, as either the source or destination IP.Based on the router logs, I expected to see three packets with my PC's source IP address and a random source port sent to 172.16.30.115, port 80 every 10 minutes.And I did see that. These are TCP packets, and they appear to be completely empty. The only thing I noticed about them is that the SYN flag is set. I don't know what the significance of that is, if any, but that's what I noticed.
What I DIDN'T expect to see were the packets that had a source IP of 172.16.30.115. These packets (also TCP) had the ACK and RST flags set, and they contained the text "Go away, we're not home." So not only are there packets being sent to an IP that cannot possibly exist within my network, but there are also packets coming FROM the impossible IP telling me to go away.All of that is scary enough on its own. But then I hopped on Google and did a search for the phrase "go away, we're not home," and almost every result was related to the decline of the Storm worm. After reading about Storm, I was more confused, not less. In its heyday, Storm used UDP traffic to communicate between peers, and my mystery traffic was TCP. Storm usually did not use well-known port numbers, such as 80, which I read was part of what made it so resilient. Not to mention that the most recent posts I could find regarding the Storm worm were dated 2010 and were about the possibility of a second Storm, and I didn't get this PC until May 2011. Plus, even if we ignore all of this and operate under the assumption that I have the Storm worm on my PC, that still doesn't explain the fact that the traffic from my computer is heading to a private IP that is NOT, I repeat, NOT being used on my network, my router says it's dropping this traffic, but my PC is still somehow receiving a response from an IP address that 1) isn't on the network and 2) can't be having any packets forwarded to it, since the router says it's dropping the traffic.So, operating under the worst-case scenario assumption, I used two different virus scanners (not simultaneously, of course) to do the deepest scans they are capable of doing. They both turned up completely clean. In fact, I've had AVG Free installed on my computer since I got it, and even if you look at my virus history you only see a few tracking cookies, a corrupted EXE from the Skype setup folder, and a Trojan dropper that I never even ran because I thought the file properties seemed fishy so I scanned it and promptly deleted it. So I now have to go back to operating under the assumption that I do NOT have the Storm worm, and I am back to the drawing board.
Remote Desktop Timeout Due To No Activity?
Mar 30, 2012REmote desktop connection times out when there is no activity, I mean I open rdp to work computer from home ,If I am away from the computer I am not using keyboard , after few minutes I get a blank screen and if it is very longthe connection times out and I have to relogin to my computer, I need suggestion on how to retain the connection so that no blank screen appears and I alos dont loose connection .
View 1 Replies View RelatedPossibility Of Internet Activity Being Watched
Dec 28, 2012I heard my brothers' conversation in our house. One was asking another, if he is downloading things. The other one replied, saying no, he didn't. And then the one that was asking said, he knew he was lying. He can detect and monitor that person's IP address to know enough if the other person is downloading or not.
View 6 Replies View RelatedLinksys WAG320N - LAN Activity Causes Disconnect?
May 24, 2011Sometimes when I actively use the LAN (copy a file or stream media), my PC loses connection to both the internet and LAN. It doesn't always happen though. I can always fix it by opening network connections and disabling Local Area Connection and then re-enabling it. However, if I don't do this, the connection stays off indefinitely. The PC that loses connection is on Windows 7 64-bit with Asus P5K integrated ethernet controller with latest drivers. Modem/router is Linksys WAG320N.
View 10 Replies View RelatedPackets Activity Stops But Still On The Network?
May 11, 2011During the last month or so my internet connection keeps stalling and will not work until I repair the connection, however I am still connected to the network, I just can't send or receive packets. In particular when I am downloading things, it will stop after 2MB is downloaded or 300MB, it just random. After sending/receiving 7,000 packets or 700,00. This only happens to my computer with the wifi adapter. Prior to this I didn't have any issues for over two years. My phone and laptop still connect via wifi to the internet. And the xbox and blu ray player are connected via ethernet and have not had any problems. The log for my router states "deauthenticate reason 3", which I have found to mean "The access point went offline, deauthenticating the client". So, I figured that the issue could be the wifi adapter which I installed on the laptop and that too never had an issue. I used inSSIDer 2.0 to see the close by networks and changed channels to get away from the strongest ones. I tried switching to wireless n only instead of g and n, the problem still persists.
Then I figured the issue must be my computer and no malware, spyware, adware nor any virus was found. The same thing happened while in safe mode. I also tried the winsock fix to no avail, reinstalled the wifi adapter and made sure all firmware for the router and adapter were up to date as well as XP. I also tried with my firewall shutdown but I still loose the connection. So I then reluctantly did a clean install and even with the bare essentials it still stopped working. I also bought a 15ft USB extension to get a better signal but still, even though I have a good or excellent signal I still have problems. My latest thought was this was the only machine running firefox 4 so I went back to 3 and that didn't either. I checked my usage with my ISP and I am no where near the 250GB a month.
Keep Getting Blocked From Any Network Activity For 1 Minute?
Dec 25, 2011I keep getting disconnected and blocked from using even LAN on my computer. This happens whenever I visit certain websites. For instance, I registered on a website that has me "kept signed in", and whenever I click to view that website, it partially loads and then for precisely 1 minute any network activity I try (like visiting my router configuration page, or clicking refresh or home to load google) will not go through. Only after that one minute is over with, I can resume browsing that website; however, if I leave it for too long, and then return, the same thing happens.
I've also noticed that if I sign out of that website and then visit it, that disconnect issue won't happen.But that isn't the case with other websites, as they require no accounts and are just pages with news and other stuff.I tried uninstalling and reinstalling my ethernet drivers, tried flushing dns, renewing ip, releasing and some other /cmd stuff that I found online.This also doesn't happen on any of the computers connected to my router (although, they are all using wireless - I am using cable to router).I'm on windows 7 x64, using a realtek ethernet card, Nod32 security suite (think it may be the settings on this thing? I set everything to super safe settings so I don't get any dumb viruses). Windows is updated (well, at least 3-4 months ago it was updated). I have no idea what is causing this, and why the precise 60 second interval until I regain access to the internet.I'm using Firefox, but this also happens on IE8 or 9 or whatever I have installed, so I don't think it's a browser issue.Things like facebook, youtube, pennyarcade and other junk work, but as soon as I go to google looking for, say, apartment rentals and open some pages, one of the links in the search results is bound to make my connection freeze.
Activity Monitor On Windows Domain?
Aug 2, 2012My office uses a Windows domain network. Is it possible for them to track which IP/Port I'm using through some network software. Sometimes I do SSH access to my server. Can they get notified any how about this ? We use Windows XP SP2.
View 3 Replies View RelatedD-Link DIR-615 :: Logging Activity On All Machines?
Jan 4, 2013I am wondering if I can log all activity on my network. Right now I can log activity with MAC addresses, but if I add a device I have to keep adding MAC address. I also have to have several policies because I can only put about 7 MAC address in per policy.
I noticed the option to add 'other machines' and I am not sure how this works. I have tried it and can't get it to work.
Hiding Network Activity From Monitoring?
Apr 28, 2011Is there any way to hide my activity on the network? My network administrator monitors our network activity, specifically chat.
View 1 Replies View RelatedCisco Wireless :: Allow User To User Traffic On WLC 5500?
Nov 21, 2012Is it configurable to allow wifi user to user traffic on WLC 5508?
View 4 Replies View RelatedCisco AAA/Identity/Nac :: ACS 5.3 Unreachable If Network Activity Decrease
May 29, 2012I am triing to migrate my old ACS to the new one. I am using ACS 5.3 on appliance CSACS-1121. Sometime, i loose the connection to the appliance and i could not connect to the appliance with SSH, i could not start the GUI and the authentication is switched to the secondary instance. As soon as I have traffic, the connection is restored.
View 3 Replies View RelatedCisco Switches :: SRW 2016 Not Showing Activity On Ports?
Apr 8, 2013I have a Cisco / Linksys SRW 2016 switch, all was working fine. Powered off and powered back on a day later.Switch powered up and the system light lit.But non of the ports what had cables connected were active....If you connect a network cable to the switch and then a laptop / pc .. The computer knows that there is a connection, but only gives a 169 address. Presumably because the switch cannot get to my dhcp ?I have tried connecting a serial cable to the switch top see if I can see any error, but when running Hyper Terminal I only get the white screen and can not see any POST etc.As far as I under stand it is a straight through cable, do I need a null modem cable to console onto the switch?
View 1 Replies View RelatedCisco Switches :: DI-655 Router - No Blinking Activity Lights
May 24, 2012My previous setup was a ProSafe GS108 switch, 10/100 Dlink router/switch used only as a switch, and a DI-655 router/switch. With this setup, activity when I wasn't using any of my computers was zero. There would be no blinking activity lights.
I dumped the ProSafe and 10/100 switch, and use the DI-655 only for my internet uplink and wireless, and now have everything else plugged into a Cisco GS200 switch. There is activity now every two seconds. I presume this prevents the Green energy saving features from kicking in as the ports are in use.
What's the difference that's leading to all this activity that presumably wasn't there before?
How To See The Activity Of Computer Connected To Multiple Display
Jan 20, 2013iam opening a cyber cafe next week.i have one computer (main server) which is connected to 5 monitors by an device named Ncomputing device and software.i have one cpu which is connected to others monitors.my question is how to see other 5 computer" s activity by my host pc?
PC SPECS:
intel i3 2120
h61 mobo
windows 7
Monitor Internet Activity On Wireless Router?
Feb 17, 2011I recently received an email from my internet provider showing illegal movie downloads through my modem. I have a wireless router hooked up (with password security) for my roommates to use and would like to monitor their internet activities to know who is downloading these movies.
View 3 Replies View Related
