02-05-2015 05:12 PM - edited 03-11-2019 10:27 PM
Hello,
I recently purchased a new ASA with Firepower. I've got Firesight setup and the firewall added. I don't have a lot of data flowing through it yet but I've been getting some good information so far. I wanted to start getting user data so I installed the user agent and pointed it towards our DCs. It's been that way for a couple of days but I still don't have any stats showing on any of the pages for users.
The user agent has been configured per any documentation I could find. One of our servers is still on 2003 but the other is 2008r2. Both are showing good in the UA config interface and the agent is showing up inside Firesight.
I haven't been able to find much information on debugging. Anyone have any thoughts?
Thanks!
02-10-2015 04:27 AM
A few of us are in the same position. Please let me know if you figure anything out. Here is my discussion on this...
https://supportforums.cisco.com/discussion/12413391/user-agent-dc-53-agent-22
02-10-2015 07:34 AM
It started working over the weekend. I have the agent installed on a app server and it reports that things are working connecting to our AD Servers and to Firesight.
When I'd go to analysis -> users -> User Activity, I think I was getting data there but it wasn't matching. I watched a couple videos from http://www.labminutes.com/video/sec/ASA%20FirePower and configured some of the access rules to process more data then all my charts started populating.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide