FMC User-IP mapping

[sameesin]

Hi All,

For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?

[Sheraz.Salim]

are you asking of the Cisco firepower User agent for AD?

[sameesin]

I mean when the User-IP mapping is received by FMC it needs to sends it down to the FTD. So want to know in what interval is it sent and are there updates sent as they arrive or it is only interval based.

[Rob Ingram]

Hi @sameesin

When a user authenticates with ISE and authorizes with a Security Group Tag, ISE notifies FMC
through pxGrid, providing the knowledge that user X from realm Y has logged in with SGT Z. FMC
takes the information and inserts into the user-IP mapping file. FMC uses an algorithm to
determine the time to push the acquired mapping to the sensors, depending on how much network
load is present.

Reference here.

HTH