I have not integrated ASA logs with ArcSight, but at a previous job I had a syslog filter on an ASA to capture VPN login events. On the ASA you can capture specific syslog event IDs, for example a successful VPN login event is 113012. Here is the exhaustive list:
Jul 09, 2020 CLI Book 3: Cisco ASA Series VPN CLI Configuration Guide Sep 25, 2018 Cisco ASA VPN Hairpinning - Networks Training The situation of having VPN traffic entering and exiting the same ASA interface is called VPN Hairpinning (or “ VPN on a stick ”). Scenarios like the above are useful in situations where you want to have centralized control of all Internet access (for hosts in the main …
Cisco ASA Remote Access VPN for Android | Weberblog.net
Nov 22, 2014
Sample configuration for connecting Cisco ASA devices to
Cisco ASA 5500 IPSEC VPN Setup Note: Split tunneling is covered in this article. Option 1 (Split Tunneling) Rather than re-invent the wheel, I’ve already covered this before in the following article. Cisco ASA – Enable Split Tunnel for IPSEC / SSLVPN / WEBVPN Clients. Cisco ASA VPN SAML-authentication - some tips and tricks