Does ASA with FirePower integrated AD must install agent?

[Ryan YC]

Hi,

I recently having lab for ASA with FirePower integrated Microsoft AD deployment,

but I am wondering whether FirePower must install agent on AD server?

I installed agent on AD server and setting LDAP connection on FireSIGHT VDC server,

then it can fetch AD forest, and dashboard about source/destination user is all can display user information, 

but I tried remove agent and stop service on AD, then the FireSIGHT VDC is still can settings LDAP connection,

so i am wondering whether FirePower must install agent on AD server,

If not, has different between both install or uninstall?

please help, thanks!

[sho14.kam]

hi,

With FTD can we integrate Active Directory without Agent being installed in the environment. Like Agentless User-ID available in Palo Alto. thanks in advance.