APM: User session id and client ip sent to syslog server after login vpn.

Forums Technical Forums
, , , ,
1

Hi Friends

We need to record user information(vpn session id & client ip) at each access internal netwok resource after the success of login F5-VPN.

Our APM is network access mode,Internal network have many tcp and udp application.I want each request these resources will be triggered the F5 to send user information(vpn session id & client ip) to the remote syslog server.How to do?

Thanks everyone

2

Hi,

Please see if below links could help in checking log on APM and divert the traffic to syslog server.,

session log on APM: SOL11134: Locating a user’s session ID

filter message on syslog: SOL13333: Filtering log messages sent to remote syslog servers (11.x - 12.x)

Off course, its also good idea to have irule for APM for getting APM log.local1, wherein we can use ACCESS::user for getting userID, and ACCESS::session for getting session ID and IP address..

KRgds, Hari