Install the passive identity agent software

Install the passive identity agent software to enable user identity monitoring and integration with your firewall management center.

This task discusses how to install the passive identity agent software. For a simple installation, you can install it on your Microsoft Active Directory (AD) domain controller; for other options, see Deploy the passive identity agent.

Note

We recommend you use the latest version of the passive identity agent. To see the available versions, go to software.cisco.com. To upgrade the passive identity agent, see Upgrade the passive identity agent software

Before you begin

See Get an API token for the passive identity agent.

Complete all of these tasks:

Follow these steps to install the Passive Identity Agent Software:

Procedure

Step 1

Download the passive identity agent from software.cisco.com.

Step 2

Log in as a member of the Administrators group to the machine on which to install the passive identity agent.

Step 3

Double-click CiscoPassiveIdentityAgentInstaller-1.1.1.msi and click Next.

Step 4

Choose a folder in which to install the passive identity agent and click Next.

The default installation folder is Program Files\Program Files (x86)\Cisco\Cisco Passive Identity Agent .

Step 5

Click Install.

Step 6

When the installation is done, click Finish and optionally check the box to start the passive identity agent.

Step 7

When the passive identity agent starts, click the On-Prem tab if you are using the agent with an on-premises Cloud-Delivered Firewall Management Center (physical or virtual) or click the Cloud tab if you are using the agent with Cloud-Delivered Firewall Management Center.

Step 8

In the Cisco Passive Agent dialog box, enter the following information:

Item

Description

FMC FQDN / IP Address

Enter the fully qualified domain name, IPv4, or IPv6 address of the Cloud-Delivered Firewall Management Center on which you created the passive identity agent identity source.

Token

Enter the API token you found in Get an API token for the passive identity agent.

Agent

Click the list to locate the domain controller of the passive identity agent you created previously on the Cloud-Delivered Firewall Management Center.

Step 9

Click the Agent list.

  1. From the list, click the name of the domain controller to monitor.

  2. Click Test.

    The following figure shows an example.

    Make sure you test the connection before you save the configuration.

  3. Only if the test succeeds, click Save.

What to do next

See Add Log On to the Passive Identity Agent Service.