05-28-2026 02:55 PM
Is there a way to verify what attributes the firewall is pulling from CIE? I am using directory sync on CIE. I would like to confirm if the firewall has ever successfully pulled anything from CIE. The firewall is configured to pull SAM Account Name and User Principal Name user attributes under User-ID --> Cloud Identity Engine --> User Attributes.
The output of the "show user cloud-identity-engine statistics all" command shows a LastQuery value of Never, and the output of "show user cloud-identity-engine status all" command shows a Last-Action value of Never. I am curious if the firewall has even pulled anything from CIE.
Cheers,
Nohash4u
08-24-2026 03:28 PM - edited 08-24-2026 03:29 PM
UPDATE
Answered my own question! @KPleasure
If the values of the show user cloud-identity-engine statistics all and show user cloud-identity-engine status all commands are both Never then there must be an issue either communicating with CIE, or CIE has not been configured to send information to the firewall.
In my case it was the latter of the two. Specifically, User Context (and more specifically, Segments) were not configured in Cloud Identity Engine.
Documentation:
Segments are where you configure what firewalls contribute data types (such as User-ID information) and what firewalls receive those data types.
I hope this helps
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
