01-14-2019 03:23 AM - edited 02-21-2020 08:39 AM
Hi All,
For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?
01-14-2019 03:29 AM
are you asking of the Cisco firepower User agent for AD?
01-14-2019 03:33 AM
01-14-2019 05:17 AM
Hi @sameesin
When a user authenticates with ISE and authorizes with a Security Group Tag, ISE notifies FMC
through pxGrid, providing the knowledge that user X from realm Y has logged in with SGT Z. FMC
takes the information and inserts into the user-IP mapping file. FMC uses an algorithm to
determine the time to push the acquired mapping to the sensors, depending on how much network
load is present.
Reference here.
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide