FMC user limit reached at 17-18k when there is a 50k license limit, ‘User Identity Dropped: User Limit Reached’

[e-bradley]

Firepower Management Centre stops recording the user to IP mapping info and creates the ‘User Identity Dropped: User Limit Reached’ messages at between 17,000 and 18,000 users, this is nowhere near the 50k license limit for users.

[phil.hydea]

Hi e-bradley

What model of FMC are you using? (50k would imply FMCv)

Can you browse to System > Licensing > Classic licensing and check the
actual amount of host and user allowance used?

Cheers
Phil

[e-bradley]

It is FMVc, I have added a pic of the license limit, will get the info you suggest and post, thank you.

[phil.hydea]

Hi

I've just checked this in the documentation. I would raise a TAC case as
this sounds like abnormal behaviour/a bug:

*"User Identity Dropped: User Limit Reached*
This type of event is generated when the system detects a user that is not
in the database, but cannot add the user because you have reached the
maximum number of users in the database as determined by your Firepower
Management Center model.

After you reach the user limit, in most cases the system stops adding new
users to the database. To add new users, you must either manually delete
old or inactive users from the database, or purge all users from the
database.

However, the system favors authoritative users. If you have reached the
limit and the system detects a login for a previously undetected
authoritative user, the system deletes the non-authoritative user who has
remained inactive for the longest time, and replaces it with the new
authoritative user."

[e-bradley]

Well yes, I checked the documentation too. I was hoping someone would have something similar that resulted in a private bug ref or solution, there is no existing public bug. I can't raise a TAC case without exhausting other avenues.