Yes, we use our SourceFire and FirePower management application for our web filter as well. We've synced SourceFire up with our ActiveDirectory (AD) server for LDAP integration on our domain. We allow users in certain AD user groups access to certain sites depending on their job role. We already have all of the user group policies in place in the firewall. My question is when we add a user to a user group and save then deploy the policy, it takes a good while for that change to take effect for the end user even after the deployment completes. We've added users towards the end of the day and it seems to take overnight for the user to finally have access to those sites the following morning. However, we can add entries to our policy to whitelist a domain on the back end that bypasses AD and deploy it and it happens immediately after deploying. Does anyone know how long exactly this is supposed to take usually or if there's a setting we can change to not have this take so long? Let me know if you need any more information.
Thank you in advance for your help!
