topic Re: Firepower user Agent in Network Security

Firepower user Agent

Nick Currie — Fri, 21 Feb 2020 15:32:21 GMT

Hi there i have a quick question regarding the Firepower User Agent. I have read in the documentation that if you require to monitor more than 5 AD servers you are required to install another User Agent. However i was attending Melbourne Cisco Live recently - and in the Firepower NGFW internet Edge Deployment Scenario's Breaksec-2050 session, I was specifically told that if I want to monitor more than 5 AD servers - i will be required to us either ISE or ISE-PIC...

I really dont want to have the added complexity of implementing ISE to our environment to use passive identity authentication... can someone please confirm which is correct?

Re: Firepower user Agent

Marvin Rhoads — Tue, 20 Mar 2018 15:15:07 GMT

The person either misunderstood the question or gave incorrect advice.

If you want to monitor more than 5 servers from a single agent then you need ISE or ISE PIC.

Multiple instances of Cisco User Agent (installed on separate computers) can be used as well.

Re: Firepower user Agent

abngroupit — Tue, 20 Mar 2018 15:31:30 GMT

Thanks for clearing that up!