How to monitor IPSEC tunnel traffic

Products

• CA Infrastructure Management
• CA Performance Management
• Network Observability

Issue/Introduction

We have hundreds of IPSEC tunnels that support clients.  We would like to monitor bandwidth usage of these tunnels.

When I look at a Cisco ASA devices used for client VPN tunnels, I do not see the IPSEC tunnel interfaces, can't figure out how to generate bandwidth data for them.  We need historical data for each client tunnel.

Environment

All supported Performance Management releases

Resolution

After engaging Cisco it was determined that the ASA devices do not have any MIBs that can be used for individual IPSEC tunnel data collection.

Additional Information

If Cisco is able to determine the data is available via SDN related technologies, the data could be gathered and presented in Performance Management via the Virtual Network Assurance (VNA) product.