Cisco 500 Series, Configuration Manual

Page: 835 / 1140

37-79
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 37 Configuring Clientless SSL VPN
Capturing Data
The following example creates a capture named hr , which captures traffic for user2 to a file:
hostname# capture hr type webvpn user user2
WebVPN capture started.
capture name hr
user name user2
hostname#
no capture hr
Using a Browser to Display Capture Data
Perform the following steps to capture data about a clientless SSL VPN session and view it in a browser.
Step 1
To start the capture utility for clientless SSL VPN, use the capture command from privileged EXEC
mode.
capture capture_name type webvpn user webvpn_username
where:
• capture_name is a name you assign to the capture, which is also prepended to the name of the
capture files.
•
webvpn_user is the username to match for capture.
The capture utility starts.
Step 2
A user logs in to begin a clientless SSL VPN session. The capture utility is capturing packets.
Stop the capture by using the no version of the command.
Step 3
Open a browser and in the address box enter
https:// asdm_enabled_interface_of_the_security_appliance : port /admin/capture/ capture_name /pcap
The following example command displays the capture named hr:
https://192.0.2.1:60000/admin/capture/hr/pcap
The captured content displays in a sniffer format.
Step 4 When you finish examining the capture content, stop the capture by using the no version of the
command.