02-17-2020 11:58 PM - edited 02-21-2020 09:55 AM
Dear all. we use network discovery and it works as expected. But today we faced interesting issue. When i looked at x.x.x.x ip's identity, it shows that current user is TOM, but we are sure that TOM's ip address is y.y.y.y. when we look at y.y.y.y it shows TOM as current user. The question is that why x.x.x.x was not updated? is there any way to update x.x.x.x to see who is currently using computer?
Note: i deleted that ip in network map, and created some noise from that ip but identity still shows Discovered Identity/TOM
02-18-2020 12:51 AM
Hi,
The Cisco Live session BRKSEC-3227 covers Firepower User Identity troubleshooting, and may provide some useful commands. Refer to the verification section of this guide for more troubleshooting commands.
HTH
02-18-2020 02:52 AM
Hello RJI
this is my mistake. i found out that computer was not in domain. so it is not connected to LDAP server. when we added computer to domain, firewall was able to identify user who logged in computer. thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide