cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
905
Views
0
Helpful
2
Replies

ASA with Firepower - User Agent - No Data

ecornwell
Level 2
Level 2

Hello,

I recently purchased a new ASA with Firepower.  I've got Firesight setup and the firewall added.  I don't have a lot of data flowing through it yet but I've been getting some good information so far.  I wanted to start getting user data so I installed the user agent and pointed it towards our DCs.  It's been that way for a couple of days but I still don't have any stats showing on any of the pages for users.

The user agent has been configured per any documentation I could find.  One of our servers is still on 2003 but the other is 2008r2.  Both are showing good in the UA config interface and the agent is showing up inside Firesight.

I haven't been able to find much information on debugging.  Anyone have any thoughts?

 

Thanks!

2 Replies 2

nathan.ollis
Level 1
Level 1

A few of us are in the same position.  Please let me know if you figure anything out.  Here is my discussion on this...

 

https://supportforums.cisco.com/discussion/12413391/user-agent-dc-53-agent-22

It started working over the weekend.  I have the agent installed on a app server and it reports that things are working connecting to our AD Servers and to Firesight.

When I'd go to analysis -> users -> User Activity, I think I was getting data there but it wasn't matching.  I watched a couple videos from http://www.labminutes.com/video/sec/ASA%20FirePower and configured some of the access rules to process more data then all my charts started populating.

Review Cisco Networking products for a $25 gift card