Firepower User Agent Communicating Ports on AD Firewall

kostasthedelegate — Mon, 22 Feb 2021 08:32:53 GMT

Hello,

Is there a guide that states the ports that need to be open in order for the user agent to communicate with an AD controller.

I am interested in the firewall of the server.

Tanks and regards,

Konstantinos

Re: Firepower User Agent Communicating Ports on AD Firewall

Rob Ingram — Mon, 22 Feb 2021 09:17:19 GMT

@kostasthedelegate

There isn't much information...but it looks like TCP/135 (used by DCOM) is required to each DC. I'd suggest taking a packet capture or running netstat on the DC and double checking the communication ports.

Bear in mind, the Firepower User Agent is EOL and not supported in FMC from version 6.7. Recommendation to migrate to ISE or ISE-PIC.

https://www.cisco.com/c/en/us/td/docs/security/firesight/user-agent/24/config-guide/Firepower-User-Agent-Configuration-Guide-v2-4/Intro.html#56246

topic Re: Firepower User Agent Communicating Ports on AD Firewall in Network Security

Firepower User Agent Communicating Ports on AD Firewall

Re: Firepower User Agent Communicating Ports on AD Firewall