cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1705
Views
5
Helpful
3
Replies

FMC User-IP mapping

sameesin
Cisco Employee
Cisco Employee

Hi All,

For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?

3 Replies 3

Sheraz.Salim
VIP Advisor VIP Advisor
VIP Advisor

are you asking of the Cisco firepower User agent for AD?

please do not forget to rate.

I mean when the User-IP mapping is received by FMC it needs to sends it down to the FTD. So want to know in what interval is it sent and are there updates sent as they arrive or it is only interval based.

Hi @sameesin

 

When a user authenticates with ISE and authorizes with a Security Group Tag, ISE notifies FMC
through pxGrid, providing the knowledge that user X from realm Y has logged in with SGT Z. FMC
takes the information and inserts into the user-IP mapping file. FMC uses an algorithm to
determine the time to push the acquired mapping to the sensors, depending on how much network
load is present.

 

Reference here.

 

HTH

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: