cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

445
Views
5
Helpful
3
Replies
Highlighted
Cisco Employee

FMC User-IP mapping

Hi All,

For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?

Everyone's tags (4)
3 REPLIES 3
Rising star

Re: FMC User-IP mapping

are you asking of the Cisco firepower User agent for AD?

please do not forget to rate.
Cisco Employee

Re: FMC User-IP mapping

I mean when the User-IP mapping is received by FMC it needs to sends it down to the FTD. So want to know in what interval is it sent and are there updates sent as they arrive or it is only interval based.
VIP Advisor RJI VIP Advisor
VIP Advisor

Re: FMC User-IP mapping

Hi @sameesin

 

When a user authenticates with ISE and authorizes with a Security Group Tag, ISE notifies FMC
through pxGrid, providing the knowledge that user X from realm Y has logged in with SGT Z. FMC
takes the information and inserts into the user-IP mapping file. FMC uses an algorithm to
determine the time to push the acquired mapping to the sensors, depending on how much network
load is present.

 

Reference here.

 

HTH