user access policy by AD users

[Mustapha Bassim]

Hello Dears

i am looking for solution like FSSO in fortigate to do it on FTD Box managed by FMC.

Best

[balaji.bandi]

Not sure what that do as FSSO, but FMC and FTD can be used source user AD users in polices.

or can you explain more about requirement to suggest better.

[Mustapha Bassim]

hello dear and thnx for reply so could you plz share a doc for that

[Rob Ingram]

@Mustapha Bassim sounds like Cisco equivalent to the Fortinet solution would be ISE-PIC (or full ISE) integrated with AD to learn IP/User mappings, this information is then sent to the FMC/FTD for use in the firewall rules based on AD group membership.

https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/control_users_with_ise_ise_pic.html

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/pic_admin_guide/PIC_admin/PIC_admin_chapter_00.htmlhttps://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/control_users_with_ise_ise_pic.html