https://community.cisco.com/t5/network-security/context-directory-agent-ip-to-user-mapping-missing-or-being/m-p/2978831#M148637 <P>Problem is solved. The issue was in test ASA device attached to CDA. It had unnecessary parameters (inactive and NetBIOS timers)&nbsp;because of which it sent mapping removal request to CDA. CDA then sent this request to production devices.</P> Wed, 16 Nov 2016 11:25:38 GMT pavelkulakov 2016-11-16T11:25:38Z https://community.cisco.com/t5/network-security/context-directory-agent-ip-to-user-mapping-missing-or-being/m-p/2978830#M148636 <P>Hello!</P> <P>We have encountered a problem with our Identity Firewall scheme recently (it works on CDA, 4 Microsoft 2012R2 DCs and Cisco ASA as a consumer device). We've noticed that some ip-to-user mappings are missing on CDA although users are in domain and stay online. All 4 DCs are up and operational and send security log to CDA. No errors were noticed on CDA's Live Log. Finally we were able to find a couple of&nbsp;users that disappear from Ip-to-address mapping list for no reason. What is the condition of mapping removal from CDA and what could be the possible source of a problem?</P> <P></P> <P>P.S CDA ver 1.0.0.011 patch 5</P> <P></P> <P></P> <P>BR,</P> <P>Pavel</P> Tue, 12 Mar 2019 08:31:27 GMT https://community.cisco.com/t5/network-security/context-directory-agent-ip-to-user-mapping-missing-or-being/m-p/2978830#M148636 pavelkulakov 2019-03-12T08:31:27Z https://community.cisco.com/t5/network-security/context-directory-agent-ip-to-user-mapping-missing-or-being/m-p/2978831#M148637 <P>Problem is solved. The issue was in test ASA device attached to CDA. It had unnecessary parameters (inactive and NetBIOS timers)&nbsp;because of which it sent mapping removal request to CDA. CDA then sent this request to production devices.</P> Wed, 16 Nov 2016 11:25:38 GMT https://community.cisco.com/t5/network-security/context-directory-agent-ip-to-user-mapping-missing-or-being/m-p/2978831#M148637 pavelkulakov 2016-11-16T11:25:38Z