Cloud Identity Engine - Sync / Attribute Verification

nohash4u — Thu, 28 May 2026 21:55:16 GMT

Is there a way to verify what attributes the firewall is pulling from CIE? I am using directory sync on CIE. I would like to confirm if the firewall has ever successfully pulled anything from CIE. The firewall is configured to pull SAM Account Name and User Principal Name user attributes under User-ID --> Cloud Identity Engine --> User Attributes.

The output of the "show user cloud-identity-engine statistics all" command shows a LastQuery value of Never, and the output of "show user cloud-identity-engine status all" command shows a Last-Action value of Never. I am curious if the firewall has even pulled anything from CIE.

Cheers,

Nohash4u

Re: Cloud Identity Engine - Sync / Attribute Verification

nohash4u — Mon, 24 Aug 2026 22:29:40 GMT

UPDATE

Answered my own question! @KPleasure

If the values of the show user cloud-identity-engine statistics all and show user cloud-identity-engine status all commands are both Never then there must be an issue either communicating with CIE, or CIE has not been configured to send information to the firewall.

In my case it was the latter of the two. Specifically, User Context (and more specifically, Segments) were not configured in Cloud Identity Engine.

Documentation:

Segments are where you configure what firewalls contribute data types (such as User-ID information) and what firewalls receive those data types.

I hope this helps

topic Re: Cloud Identity Engine - Sync / Attribute Verification in Cloud Identity Engine Discussions

Cloud Identity Engine - Sync / Attribute Verification

Re: Cloud Identity Engine - Sync / Attribute Verification