FirePower webportal auth options

[lcaruso]

Is it possible to use AD LDAP authentication on a DMZ hosted web portal with FirePower? 

Client will not implement ISE until later in year but needs a short term solution.

[balaji.bandi]

Can you elaborate on your requirement in more detail?  is this for remote access VPN or Wired users?

also mentioned what mode of FP and what code running. - and is the DMZ part of the firepower zone ?

[lcaruso]

Sure, thanks. FP Routed Mode running 7.3 or later with DMZ zone, not remote access vpn, just web browsing to a URL for at home employees. We are still building the FP solution and have not yet deployed and this question came up today. 

[balaji.bandi]

thank you for the information: possible check the below guides :

https://www.cisco.com/c/en/us/support/security/defense-center/series.html#Configuration

[Rob Ingram · Accepted solution]

@lcaruso FTD using FMC supports captive portal which can use LDAP authentication. I've not personally used it, but it sounds like it might be suitable.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/identity-captive-portal.html

[lcaruso]

Thanks!!

[MHM Cisco World · Accepted solution]

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-firepower-services/200566-Configure-Active-Directory-Integration-w.html

[lcaruso]

Thank you!!