Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 1927 / 2164

1-119
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Capturing Data
Capturing Data
The CLI capture command lets you log information about websites that do not display properly over a
clientless SSL VPN session. This data can help your Cisco customer support engineer troubleshoot
problems. The following sections describe how to capture and view clientless SSL VPN session data:
•
Creating a Capture File, page 1-119
•
Using a Browser to Display Capture Data, page 1-119
Prerequisites
•
Enabling clientless SSL VPN capture affects the performance of the security appliance. Be sure to
disable the capture after you generate the capture files needed for troubleshooting.
Creating a Capture File
Perform the following steps to capture data about a clientless SSL VPN session to a file.
Detailed Steps
Using a Browser to Display Capture Data
Perform the following steps to capture data about a clientless SSL VPN session and view it in a browser.
Command Purpose
Step 1
capture capture_name type webvpn user
webvpn_username
Example:
hostname# capture hr type webvpn user user2
WebVPN capture started.
capture name hr
user name user2
hostname# no capture hr
Starts the capture utility for clientless SSL VPN.
•
capture_name is a name you assign to the
capture, which is also prepended to the name of
the capture files.
•
webvpn_user is the username to match for
capture.
Creates a capture named hr, which captures traffic
for user2 to a file.
Step 2
(Optional)
no capture capture_name
Stops the capture utility from capturing packets after
a user has logged in and began a clientless SSL VPN
session. The capture utility creates a
capture_name .zip file, which is encrypted with the
password koleso .
Step 3
Send the .zip file to Cisco Systems or attach it to a Cisco TAC
service request.
Step 4
Unzip the contents of the file using the koleso password.