topic I had the same problem on 6.0 in Network Security

Unknown User

mcvosi — Tue, 12 Mar 2019 13:12:01 GMT

What causes an unknown user? I'm running the User Agent (2.3) on one of my Domain Controllers, and it picks up SOME users, but not all. I couldn't find any logs to check, aside from the service log for the User Agent.

There are various

Oliver Kaiser — Tue, 15 Nov 2016 19:24:54 GMT

There are various troubleshooting steps that can be done to verify why this is happening. Before sending you the required commands could you tell me which version of FMC and sensor (FTD or Firepower module?) you are using?

Latest version 6.1.

mcvosi — Tue, 15 Nov 2016 19:44:33 GMT

Latest version 6.1.

Connect to your FMC using SSH

Oliver Kaiser — Tue, 15 Nov 2016 19:53:17 GMT

Connect to your FMC using SSH and execute the following two commands. Let me know if any of the two returns any data and post your results here

cat /var/log/messages | grep Duplicate

cat /var/log/messages | grep "Invalid engine 0"

Considering your image... Are you using FTD (unified image) or the firepower module on ASA? And how many users are you syncing - any chance there are > 1500 Users in any group you sync?

Less than 100 users. Using

mcvosi — Tue, 15 Nov 2016 20:30:06 GMT

Less than 100 users. Using modules on my ASA's.

No results.

mcvosi — Tue, 15 Nov 2016 20:38:35 GMT

No results.

Your issue sounds a lot like

Oliver Kaiser — Tue, 15 Nov 2016 20:48:39 GMT

Your issue sounds a lot like CSCvb63664. You might wanna check out the conditions and verify according to the information listed in the bug.

I had the same problem on 6.0

mcvosi — Tue, 15 Nov 2016 20:50:47 GMT

I had the same problem on 6.0.1 though, not just 6.1.

Ok... The bug description

Oliver Kaiser — Tue, 15 Nov 2016 20:59:29 GMT

The bug description (affected versions) might not be correct, so you might wanna still check it. In my experience issues like that are mostly related to bugs or malformed user entries that cant be processed by agent or FMC.

Here the same scenario and

crusier2015 — Wed, 23 Nov 2016 18:01:02 GMT

Here the same scenario and problem, do you have a sugestion to fix ?

I haven't seen any resolution

mcvosi — Wed, 23 Nov 2016 19:00:23 GMT

I haven't seen any resolution yet. I guess when they release an update.