Cisco Firepower 1010 NGFW user access list from AD

[ma.romero]

Hi,

I have a Cisco ASA 5506x and and Cisco CDA, integrated with AD and CDA Agent, to create firewall rules for each users to access some resources allow/deny.

Now, I am going to renew this device for a new one Cisco Firepower 1010 NGFW and a need to migrate the same services to prevent or allow users to access some networks resources. 

Do I need Cisco ISE or can I use this device to it? Without any new devices or solutions.

Could you help me the solution which I need?

Thanks in advanced.

Regards.

[Marvin Rhoads · Accepted solution]

Either ISE or ISE-PIC (Passive Identity Collector) would be recommended.

There is a legacy Cisco User Agent (rebranded old Sourcefire User Agent) that can be used; but it is being deprecated and won't be supported for new installations of Firepower 6.6 or later.