Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
All deployment guides i see requires CDA/AD agent, just curious, can I implement FW identity without the CDA agent? Can't the ASA retrieve IP/username mapping directly from the Active Directory?