pxGrid Username with 802.1x+PassiveID

[vibobrov]

Hi Experts,

If we're using machine certificate for 802.1x authentication and PassiveID for user identity, which username will be advertised via pxGrid via the Session topic, the TLS computer account or the PassiveID username from AD logs?

Thanks

[hslai · Accepted solution]

This has not been tested by our teams. Please discuss it with our product management team.

[bricrock]

Apologies for re-opening an Answered question, but has there been any further testing on this?  I have a customer looking to use this exact scenario: AuthC with Machine certificate, looking to get user information into Stealthwatch via PassiveID.

Please advise.  Thank you,

Brian

[lnemec]

Hi Brian,

i have currently exactly same issue. I have tried so many different formats for computer name used on 802.1X session, but no success.  It seems that we need such username format for computer, that FMC find this computer via LDAP lookup.

Regards,

Laco