FMC 6.0 - "No Authentication Required" when Realm/Identity policy in place

[dbert]

I have a ticket open about this issue, but I am hoping to find an answer on here faster..

My LDAP/realm is configured properly, I can see who is logged into a specific host yet group filtering doesn't seem to be working..

In the summary charts, under traffic iitiated by user all I see is "No authentication required" meanwhile i've got a passive authentication identity rule in my main access control policy... anyone run into this issue?

[rodrigo.cisco]

I getting the same problem. This have started after upgrade from 5.4 to 6. If you get the answer please let me know.

[rodrigo.cisco]

This problem happen only if using ISE as the Identity Server instead of FPUA (aka SFUA). Is there some way to continue with ISE with PxGRID and be able to create Identity Policies?

[Colin Edwards]

I had this issue after upgrading to 6.0.  I didn't talk to TAC, but for me it was fixed as soon as I created an Identity Policy.  For me, in the policy I chose my Realm and selected Passive Authentication.  Then go edit your Access Control Policy, pick the Advanced Tab, and select your new Identity Policy.  Don't forget to push policy out to your sensors.

[rodrigo.cisco]

I have already done this, but still doesnt work. The user information show as UnKnow. I have a TAC open but up to now they havent found the problem too.

[scott.mickelsonAMS]

Colin,

  This worked for me! I'm not using ISE, but have SFUA installed and was seeing No authentication required for all authentications and no user tracking was available in any reporting. Once I added this basic Identity Policy to my Access Controll Policy I am good to go.

Best Regards,

-Scott