Specifications

11-28
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 11 Monitoring and Troubleshooting Agent Sessions
Online Users list
The following details are stored in the UAL files:
• Username
• Activity Time—login time, logout time, or role change time
• Activity Reason—Reason for logout. The reasons may be “Logout”, “Timeout”, or “Admin Action”
• User Location—VPN, switch, port, VLAN, etc. (whatever is applicable)
• User Reports—Applicable for login and role change, not on logout
• Activity Result— The result is reported as success or failure. If activity fails, it means the login has
failed. Activity Reason is supplied with the appropriate agent, authentication server, or switch
management error
• MAC address
• Hostname
• IP address
• Role
• OS
• VLAN
• Session Length—For role change and logout only (applicable for only In-Band deployments).
Session Length is a pre-configured value for the temporary role configured under User
Management > User Roles> Schedule.
Note Session Length will not be displayed in the Logout activity when the client is logged out from a
Temporary Role after failing to satisfy a requirement.
Note The UAL file is not updated when the Enable User Activity Logging checkbox is unchecked in the
Monitoring > Reporting > Configuration tab.
Online Users list
Two Online Users lists are viewed from the Monitoring > Online Users > View Online Users tab:
• In-Band Online Users
– Tracks In-Band authenticated users logged into the network. In-Band users with active sessions
on the network are listed by characteristics such as IP address, MAC address (if available),
authentication provider, and user role.
– Removing a user from the In-Band Online Users list logs the user off of the In-Band network.
• Out-of-Band Online Users
– Tracks all authenticated Out-of-Band users that are on the Access VLAN (trusted network).
Out-of-Band users can be listed by switch IP address, port, and assigned Access VLAN, in
addition to client IP address, MAC address (if available), authentication provider, and user role.