Hi All,
In my customer site, FMC is integrated with Active Directory (AD) to track the connection events with their respective AD usernames.
For this scenario, we used user agent installed on a separate VM and added primary AD and FMC address in this user agent. After setup, usernames in connection event logs can be seen.
For the next requirement, customer want to use multi-AD integration with user agent. If primary AD was down, secondary one should take over the action with user agent. My problem is that secondary AD doesn't work when active one is down and we can't see usernames in connection events even the same configurations in both ADs. AD failover works by itself. I doubt that multi-AD integration is not accepted by firepower user agent.
My customer is currently using ASA-5525X firepower series.
Hope your answers.
Su Myat Lwin