topic Fire Power Defense Center External User Authentication - adding / removing users automatic ? in Network Security

Fire Power Defense Center External User Authentication - adding / removing users automatic ?

Austin Clark — Fri, 21 Feb 2020 15:55:47 GMT

We are using external authentication with our FMC and it is working correctly. My question is, do the user names get added automatically and removed automatically when they are added to the appropriate active directory group. Or is that process manual.

It seems the addition of the username is automatic.

Re: Fire Power Defense Center External User Authentication - adding / removing users automatic ?

balaji.bandi — Thu, 28 Jun 2018 20:41:33 GMT

As long as Firepower have AD Trust relation, the Device passes the authentication to AD, so they do not stored locally.

Re: Fire Power Defense Center External User Authentication - adding / removing users automatic ?

Austin Clark — Fri, 29 Jun 2018 11:20:32 GMT

I'm talking specifically about the Usernames that I see in the FMC, not the passwords. How are they added and removed for external users? Can it be automatic, based on what the FMC finds in the AD group?

This is for our access control reviews. If the usernames aren't automatically removed from FMC when removed from an AD group, then we must perform some kind of reconciliation report to make sure those usernames are taken out on a regular basis. It seems FMC should query AD periodically????