FMC User-IP mapping

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2019 03:23 AM - edited 02-21-2020 08:39 AM
Hi All,
For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2019 03:29 AM
are you asking of the Cisco firepower User agent for AD?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2019 03:33 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2019 05:17 AM
Hi @sameesin
When a user authenticates with ISE and authorizes with a Security Group Tag, ISE notifies FMC
through pxGrid, providing the knowledge that user X from realm Y has logged in with SGT Z. FMC
takes the information and inserts into the user-IP mapping file. FMC uses an algorithm to
determine the time to push the acquired mapping to the sensors, depending on how much network
load is present.
Reference here.
HTH
