topic Re: FMC Realm configuration in Network Security

FMC Realm configuration

pavan2 — Wed, 17 Feb 2021 19:00:51 GMT

Dear Community ,

My doubt is in regard to Realm configuration change, where i want to update AD password of the directory.

When the password is updated

1)Does it effect the existing AnyConnect VPN users by disconnecting the connections or the users will have no impact while we update password.

2) once after the password update, is it necessary to download the users and groups manually instead of waiting for the schedule to download it.

Thanks

Pavan

Re: FMC Realm configuration

balaji.bandi — Wed, 17 Feb 2021 19:23:33 GMT

As long as FMC able to connect to AD and able to pull the user information, I do not see any issue.

But do it in a maintenance window, where there is low traffic of VPN users connecting timings (to be safe)

Re: FMC Realm configuration

pavan2 — Wed, 17 Feb 2021 19:32:12 GMT

Thank you balaji!

Does the users whoever connected prior activity gets disconnected when i perform password update ?

Re: FMC Realm configuration

balaji.bandi — Wed, 17 Feb 2021 23:59:42 GMT

I do not believe that they do, but we need to consider change over time - how quickly you doing both sides and push the changes.

Re: FMC Realm configuration

pavan2 — Thu, 18 Feb 2021 00:25:33 GMT

Thanks Balaji

My understanding is that,

the users and groups will be downloaded on timely basis based on the scheduled time in user download and in the mean time we change password, the existing database should keep the connections working and also even allow new connections as its already has downloaded the users and groups. When the password is changed and we manually download the users and groups, our plan is to disconnect the test VPN user and reconnect again to confirm everything is working fine.

I will keep posted on how the change goes.

Re: FMC Realm configuration

balaji.bandi — Thu, 18 Feb 2021 00:44:53 GMT

Sure sounds like a good plan (post-testing for the change).