Adding multiple Active Directory(s) in firepower user agent

SuMyatLwin0903 — Tue, 28 Sep 2021 04:29:02 GMT

Hi All,

In my customer site, FMC is integrated with Active Directory (AD) to track the connection events with their respective AD usernames.

For this scenario, we used user agent installed on a separate VM and added primary AD and FMC address in this user agent. After setup, usernames in connection event logs can be seen.

For the next requirement, customer want to use multi-AD integration with user agent. If primary AD was down, secondary one should take over the action with user agent. My problem is that secondary AD doesn't work when active one is down and we can't see usernames in connection events even the same configurations in both ADs. AD failover works by itself. I doubt that multi-AD integration is not accepted by firepower user agent.

My customer is currently using ASA-5525X firepower series.

Hope your answers.

Su Myat Lwin

Re: Adding multiple Active Directory(s) in firepower user agent

Marvin Rhoads — Tue, 28 Sep 2021 08:00:41 GMT

A given User Agent can connect to multiple AD instances. Have you run the User Agent troubleshooting tool to investigate the problem?

https://www.cisco.com/c/en/us/td/docs/security/firesight/user-agent/25/config-guide/Firepower-User-Agent-Configuration-Guide-v2-5/ConfigAgent.html#80455

topic Re: Adding multiple Active Directory(s) in firepower user agent in Network Security

Adding multiple Active Directory(s) in firepower user agent

Re: Adding multiple Active Directory(s) in firepower user agent