How security event is shared between DC's

MSJ1 — Thu, 30 Jun 2022 19:00:33 GMT

I have only one operational DC from where user Agent are getting userid/ip mapping info. Even though there are 1 other DC added at User agent but other 1 are part of Test Site.

How to confirm which dc actually providing user id and ip mapping to the user agent.
Refer to below doc and based on my current scenario, if technically user agent connecting to one dc which is not listed in user agent while knowing DC's do not share the security events ?

Cisco reference quote

**https://www.cisco.com/c/en/us/td/docs/security/firesight/user-agent/24/config-guide/Firepower-User-Agent-Configuration-Guide-v2-4/ConfigAgent.html#88746

If your Active Directory system has multiple domain controllers, enter the host name or IP address of the domain controller with which you want the user agent to communicate. (Active Directory domain controllers don’t share their security logs so you must have a separate user agent connection to each controller.) In a distributed or heavily trafficked system, you can optionally install more than one user agent as discussed in Deploy Multiple User Agents.**

Re: How security event is shared between DC's

Greg Gibbs — Thu, 30 Jun 2022 22:46:57 GMT

This appears to be more of a Firepower question than one related to ISE/NAC. I would suggest moving/posting your question to the Network Security community section.

Re: How security event is shared between DC's

MSJ1 — Mon, 04 Jul 2022 12:26:13 GMT

ok did that.

topic How security event is shared between DC's in Network Access Control

How security event is shared between DC's

Re: How security event is shared between DC's

Re: How security event is shared between DC's