topic CDA is the integration proxy in Network Security

Is Context Directory Agent required now for Prime Security Manager?

newtonpara — Tue, 12 Mar 2019 04:42:36 GMT

I am setting up the Cisco Prime Security manager. I want to integrate it with AD agent so I can do Ip to user mapping. I am finding that the AD agent is retired and now Cisco says to use Context Directory Agent. Is there any other way of integrating AD with the CX module?

I wanted to know before starting a lengthy install.

I know Context Directory Agent is used for other things.

CDA is the integration proxy

Marvin Rhoads — Thu, 04 Sep 2014 23:40:48 GMT

CDA is the integration proxy between CX module services and AD.

Without it, you cannot use identity-based services passively (no user input required). You would instead need to have users prompted to provide their authentication actively to the firewall (which can in turn ask AD, LDAP etc. for authentication) in order to map their IP address to their identity.

Reference.