Sourcefire User Agent and LDAP integration

[WILLIAM STEGMAN]

Does anyone have any experience using LDAP integration with the Firepower/Firesight setup (ASA with integrated firepower, managed via Firesight) that uses rules containing Active Directory groups and Citrix?  I see the sourcefire user agent's purpose is to map IP addresses to user accounts, so my concern is that the IP address of a Citrix server will be used in the rule if I have a user that is logged into that Citrix server hitting a particular rule, and wouldn't want that rule to apply to all users currently connected to that Citrix server.

thank you, 

Bill

[Greg Smalley · Accepted solution]

There is no Citrix User Agent yet, so your other option would be enable per-session IP Virtualization for your Citrix hosts.

http://support.citrix.com/article/CTX137163

-Smalley

[WILLIAM STEGMAN]

thanks Greg

[jacek99111]

Not completely , You can use virtual ip but  still yor authentication is stil from citrix servet. not from virtual ip desktop