topic FMC User-IP mapping in Network Security

FMC User-IP mapping

sameesin — Fri, 21 Feb 2020 16:39:48 GMT

Hi All,

For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?

Re: FMC User-IP mapping

Sheraz.Salim — Mon, 14 Jan 2019 11:29:39 GMT

are you asking of the Cisco firepower User agent for AD?

Re: FMC User-IP mapping

sameesin — Mon, 14 Jan 2019 11:33:04 GMT

I mean when the User-IP mapping is received by FMC it needs to sends it down to the FTD. So want to know in what interval is it sent and are there updates sent as they arrive or it is only interval based.

Re: FMC User-IP mapping

Rob Ingram — Mon, 14 Jan 2019 13:17:42 GMT

Hi @sameesin

When a user authenticates with ISE and authorizes with a Security Group Tag, ISE notifies FMC
through pxGrid, providing the knowledge that user X from realm Y has logged in with SGT Z. FMC
takes the information and inserts into the user-IP mapping file. FMC uses an algorithm to
determine the time to push the acquired mapping to the sensors, depending on how much network
load is present.

Reference here.

HTH