What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

How to monitor traffic (dividing per user, protocol, etc) through a VPN tunnel?

Votes:

0

We need to monitor traffic in remote sites. We need to know the top user, top protocol, etc. We tried to use NetFlow, but because of tunnels VPN between remote site and the site where PRTG Network Monitor is running, the protocols is not showed. We can only see "other protocols".

Is there a way to have these informations (users, protocols, etc)? Is it possible useing sniffer, or another way?

Thanks!

protocol traffic vpn-tunnel

Created on Mar 16, 2011 1:44:47 PM



6 Replies

Votes:

0

Dear Bruno,

it might be possible using Sniffing (maybe with a PRTG Remote Probe in the remote sites), but you would have to sniff the traffic inside the VPN. Otherwise, you probably will only see the VPN traffic in total again.

Best Regards.

Created on Mar 16, 2011 4:08:48 PM by Torsten Lindner [Paessler Support]



Votes:

0

Hi,

well, we have remote probes in all remote sites. How can I sniff the traffic inside the VPN?

Thanks.

Created on Mar 16, 2011 4:16:21 PM



Votes:

0

Well, you would have to connect the remote probe with the packet sniffer sensor to the router (if it has a monitoring port) which supplies the VPN connection to your core location. That would be the only way I see right now.

Created on Mar 16, 2011 4:31:32 PM by Torsten Lindner [Paessler Support]



Votes:

0

Hi,

we have an equipment called RV042 (Cisco). This equipment supplies VPN before link supplier.

How can we set up the sniffer sensor to manage it and get the informations we need according to our scenario?

Thanks

Created on Mar 16, 2011 8:38:46 PM



Votes:

0

Basically you would have to place a PRTG Probe with a sniffer just before the VPN device, as a kind of "Proxy", otherwise the sniffer will again only see the VPN-Traffic (which is kind of the purpose of a VPN).

Created on Mar 17, 2011 1:35:00 PM by Torsten Lindner [Paessler Support]



Votes:

0

As of PRTG version 12, it is also possible to monitor Cisco ASA VPNs with natively available sensors:

Created on May 23, 2014 4:39:05 PM by Gerald Schoch [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.