Sourcefire Active Directory Agent

[keithcclark71]

Has anyone had any luck in getting this working? I downloaded and installed on Win 7 64bit and after launching found myself not able to configure the agent due to not being able to navigate within the front end . I tried maximizing the window etc but not able to input values and then see the save button for those input vales etc

[Philip D'Ath]

We have used it lots.  It is always a bit painful to get going.  I've only used it on Windows Server OS, but that shouldn't make much of a difference.

[keithcclark71]

Ive got the agent configured and working with the FMC. I have a realm configured and able to download AD groups.I created a Passthrough Authentication Identity polciy and associated the realm. I have an ACP configured with rule "AnyIPV4Private to any IPV4 and assoicated the Identity policy. I can see the Users under the user list but for some reason I am not seeing any user to IP mappings within User Activity. If run Sudo Grep comamnds for the agent communication to the FMC and see no issues etc. Not sure where I went wrong here

[keithcclark71]

It works now I didnt assign any user objects to the polciy i was working within. That being said the installer for the agent window was locked so I had to tab to "Save" button " etc as it could not be seen