Customer currently has ASA-5525X terminating AnyConnect VPN, and providing Internet edge firewall functions.
VPN users authenticate against ISE as RADIUS server.
They're interested in adding FirePower on top of ASA, to provide URL-filter, and anti-malware (AMP).
One of the requirements is to provide URL-filter based on AD user & group membership.
Do the ISE logs contain the username-to-IP mapping for VPN users, so that FirePower can get the mapping from ISE?
Specifically, we're hoping the ISE logs would contain the internal IP's from the local VPN pool on the ASA, and not public IP's from remote users' ISP.
TIA
Kevin
