You can view user information associated with networks, end-host devices, Active Directory domains, routers and switches when you enable the Identity Mapping feature on the appliance. Access to user information related to networks and devices help network administrators to understand how the network resources are consumed and by whom. Each network user being mapped can use different devices to access their network environment. So using the identity mapping feature and synchronizing servers, such as Microsoft servers and Cisco ISEs, on the Infoblox appliance provide visibility of user interaction with their environments. By enabling this feature, you can monitor domain users, the IP addresses they log on to, the login status, and the time duration of their current status in the IPAM tab. For information about Identity Mapping for Active Directory users, see Configuring Identity Mapping on page 1333 and how to collect about user and device information from Cisco ISEs, see Configuring Cisco ISE on NIOS Configuring Cisco ISE on NIOS. You can generate the user login history report to monitor user login activities in a given time frame. For information, see User Login History Report.
You can do the following in the Network Users tab:
- View active network users, as described in Viewing Active Network Users.
- View user login history, as described in Viewing Network Users Login History .
...
...
...
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
...
- From the Grid tab, select the Grid Manager tab, and then select Grid Properties -> Edit from the Toolbar.
- In the Grid Properties Editor, select the General tab -> Advanced tab, and then complete the following:
...
- Enable Network Users feature: Select this check box to enable the Identity Mapping feature on the appliance. Note that the Network Users tab is available only after you enable this feature.
Note: On an Infoblox appliance, the Enable Network Users Feature option is disabled by default for all new installations. - Save the configuration.
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
You can view all the users who are currently active on a network in the Active Users tab. Using the Action icon icon
, you can do the following in the Active Users tab:
...
- From the Data Management tab, select the Network Users tab > Active Users tab.
or
You can use the Action
...
- icon in the following tabs to open the Active Users dialog box:
IPAM tab: From the Data Management tab, select the IPAM tab, click the Action
...
- icon next to the respective network and select Show Active Users.
DHCP tab: From the Data Management tab, select the DHCP tab > Networks tab, click the Action
...
- icon next to the respective network and select Show Active Users.
Cloud tab:
- In the Networks tab, click the Action icon
icon
next to the respective network and select Show Active Users. - In the VMs tab, click the Action icon and select Show Active Users.
DNS tab: From the Data Management tab, select the DNS tab > Zones tab > Records tab, click the Action
...
- icon and select Show Active Users.
The Active Users tab or Active Users dialog box displays the following information:
- User Name: Displays the logon name of the user. When the same user logs in to the domain from multiple clients, entry for each IP address is displayed separately. If multiple users logs in to the same domain, entry for each user is listed separately.
- Domain: The name of the domain.
- First Seen: The timestamp when the user logged in to the network for the first time.
- IP Address: The IP address of the client.
- Data Source: The IP address of the Microsoft server or the API method.
- Data Source IP Address: Displays the source from which the data is collected. It can be Cisco ISE, Microsoft server or the API method .
...
- .
...
- Last Seen: The timestamp when the user was last seen accessing the network.
- Last updated: Displays the timestamp when the user information was last updated.
...
- From the Grid tab -> Grid Manager tab, expand the Toolbar and click Grid Properties -> Edit.
- Select Microsoft Integration tab in the Grid Properties Editor and complete the following in the Basic tab:
...
- Assumed Network Users Time Out: Specify the time period after which the user status changes to Timed Out. Select the time period in minutes, hours, or days from the drop-down list.
- Save the configuration.
...
- .
...