FMC Realm configuration

[pavan2]

Dear Community ,

My doubt is in regard to Realm configuration change, where i want to update AD password of the directory.

When the password is updated

1)Does it effect the existing AnyConnect VPN users by disconnecting the connections or the users will have no impact while we update password.

2) once after the password update, is it necessary to download the users and groups manually instead of waiting for the schedule to download it.

Thanks

Pavan

[balaji.bandi · Accepted solution]

As long as FMC able to connect to AD and able to pull the user information, I do not see any issue.

But do it in a maintenance window, where there is low traffic of VPN users connecting timings (to be safe)

[pavan2]

Thank you balaji!

Does the users whoever connected prior activity gets disconnected when i perform password update ?

[balaji.bandi · Accepted solution]

I do not believe that they do, but we need to consider change over time - how quickly you doing both sides and push the changes.

[pavan2]

Thanks Balaji

My understanding is that,

the users and groups will be downloaded on timely basis based on the scheduled time in user download and in the mean time we change password, the existing database should keep the connections working and also even allow new connections as its already has downloaded the users and groups. When the password is changed and we manually download the users and groups, our plan is to disconnect the test VPN user and reconnect again to confirm everything is working fine.

I will keep  posted on how the change goes.

[balaji.bandi]

Sure sounds like a good plan (post-testing for the change).