Cisco ASA ip address and username in security/traffic logs

[ebotstan1]

Does the Cisco ASA have a user-id feature as in Palo Alto? Can you see the assoiation of user ip adddress and user names in the secrity/traffic logs? Thanks Stan

[Rob Ingram]

Hi,

Yes, the ASA does have a user identity feature, this maps the IP address to the Username, the firewall rules can be created based on AD username or groups. Reference here.

If you are using ASA hardware but running FTD software then this is also supported, but works differently. References here and here.

HTH