Understand AD Connector Software Changes for Version 1.13.8

Introduction

This document describes changes to Domain Controller and AD Connector registration and sync mechanism in 1.13.8 of the AD Connector software.

Background Information

Cisco announces the availability of Cisco AD Connector version 1.13.8, which includes enhancements to ensure compatibility with updates to Cisco Umbrella and Cisco Secure Access. The release includes changes to Domain Controller (DC) and AD Connector (ADC) registration and sync mechanism.

After May 20th, 2024, any AD Connector installations that have not been upgraded to version 1.13.8 are no longer be able to send updates of new Users & Groups information to Cisco Umbrella or Cisco Secure Access. It is vital to make sure your installation is up to date to avoid any disruptions. Any devices still not on v1.13.8 at this point must be manually upgraded.

As of February 22nd, 2024, it is mandatory for all AD connector installations with older versions to upgrade to at least version 1.13.8. All healthy installations of AD connector is automatically upgraded to 1.13.8.

If you are planning to register a new AD Connector, you must use version 1.13.8. You can download this latest version of ADC along with the latest Windows Configuration script with version 1.1.24 for Domain Controller directly from the dashboard. Before you start installing the AD Connector, ensure that you have downloaded version 1.13.8 from the dashboard.

Next Steps

Verifify/Upgrade/Install AD connector for Cisco Umbrella

To verify the AD Connector Version and Health:

1. Under Umbrella Dashboard, navigate to Deployments > Configuration > Sites and Active Directory. Select for all AD Connector and verify the status is green and Version is 1.13.8.
2. If the status of the AD connector is Not Healthy, use the steps provided in this link to get the AD connector to healthy state for auto upgrade to succeed.

Note: After May 20th, 2024, the automatic upgrades for AD connectors with versions earlier than 1.13.8, are no longer operational. If for some reason the auto-upgrade fails, you need to manually download and install the latest version of the AD connector and configure as specified in this link: https://docs.umbrella.com/deployment-umbrella/docs/5-connect-active-directory-to-umbrella#install.

Verification/Upgrade/Installation guidelines of AD connector for Cisco Secure Access

To verify the AD Connector Version and Health:

1. Under Secure Access Dashboard, navigate to Connect > Users and Groups > Configuration Management > Provisioning > Active Directory.
2. If the status of the AD connector is Not healthy, use the steps provided in this link to get the AD connector to healthy state for auto upgrade to succeed: https://docs.sse.cisco.com/sse-user-guide/docs/connect-active-directory-to-secure-access#step-4--verify-that-the-connector-syncs-with-secure-access.

Note: After May 20th, 2024, the automatic upgrades for AD connectors with versions earlier than 1.13.8, are no longer operational. If for some reason the auto-upgrade fails, you need to manually download and install the latest version of the AD connector and configure as specified here: https://docs.sse.cisco.com/sse-user-guide/docs/connect-active-directory-to-secure-access.