Does anyone have any experience using LDAP integration with the Firepower/Firesight setup (ASA with integrated firepower, managed via Firesight) that uses rules containing Active Directory groups and Citrix? I see the sourcefire user agent's purpose...