topic Are you using either the in Network Security

Controlling Traffic Based on Users Firepower on asdm

tatostian1 — Tue, 12 Mar 2019 08:01:29 GMT

Dear all

I have This Scenario

I can Block Facebook, youtube for all users with a policy, But when try allow traffic specific users groups of Active directory, this allow traffic for all users, same if try with a network. if remove the group this block the URL

Regard

Sebastian

Hi,

ankojha — Fri, 15 Jul 2016 05:54:33 GMT

Hi,

Could you verify if the config is according to the below document :

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/200329-Configure-Active-Directory-Integration-w.html

Thanks,

Ankita

Are you using either the

michaellperrin — Mon, 18 Jul 2016 15:07:55 GMT

Are you using either the Sourcefire agent or ISE for ip-user mappings?

I use the SourceFire Agent,

tatostian1 — Tue, 19 Jul 2016 16:58:29 GMT

I use the SourceFire Agent, This must be installed on each user's machine?

or only Active directory Server?

Just needs to be on any PC

michaellperrin — Tue, 19 Jul 2016 17:02:58 GMT

Just needs to be on any PC that has access to the AD.

Under the table view of the connection events do you see the user name under Initiator User or does it say Unknown?

thanks guys, i solved this

tatostian1 — Wed, 20 Jul 2016 13:33:10 GMT

thanks guys, i solved this with network policy, for the moment

regards