Dear all. we use network discovery and it works as expected. But today we faced interesting issue. When i looked at x.x.x.x ip's identity, it shows that current user is TOM, but we are sure that TOM's ip address is y.y.y.y. when we look at y.y.y.y it shows TOM as current user. The question is that why x.x.x.x was not updated? is there any way to update x.x.x.x to see who is currently using computer?
Note: i deleted that ip in network map, and created some noise from that ip but identity still shows Discovered Identity/TOM
The Cisco Live session BRKSEC-3227 covers Firepower User Identity troubleshooting, and may provide some useful commands. Refer to the verification section of this guide for more troubleshooting commands.
this is my mistake. i found out that computer was not in domain. so it is not connected to LDAP server. when we added computer to domain, firewall was able to identify user who logged in computer. thanks.
IntroductionComponentsISE ConfigurationEnd user perspective and Validation
Cisco Identity Services Engine (ISE) gives you intelligent Integrated protection through intent-based policy and compliance solution. ISE supports external MDM ...
This video provides the steps to configure the Cisco Threat Response (CTR) and ESA Integration.
This is live on the portal:https://video.cisco.com/video/6159336218001
And on YouTube:https://www.youtube.com/watch?v=UCKIdx5rdFg
I need to migrate from C170 to C190 and have already match to the same Firmware Version. I have a question. Is there any method that can export and import the configuration file instead of form cluster ?
This AMA will serve as the Q&A for the Cisco Live Digital breakout DGTL-BRKSEC-1011 - "A Challenger Appears: Defending Mailboxes in the Cloud" which covers a brand new product which will be announced during the event: Cloud Mailbox Defense.