topic CX Issue in Web Security

CX Issue

mateen.padela — Wed, 18 Feb 2015 15:46:02 GMT

Hello All,

I have deployed 5515-x ASA with IPS+AVC+WSE license in a client place.

Have installed cisco prime security manager and configured web filtering policies as well for URL block and stuff. and its working fine.

But when i integrate it with the AD and try to import user group and then use those user group in different policies and enable authentication on the Identity policy. I am getting prompts for user credentials when anyone tried to browse.

But unfortunately the authentication doesnt get complete and it fails and the users cannot browse the internet.

Any thoughts ?.

Regards,

Matt

Do you have CDA installed and

Collin Clark — Wed, 18 Feb 2015 23:16:23 GMT

Do you have CDA installed and configured? Your authentication policy is set to prompt for auth and it should be passive with CDA and AD.

Hi Collin, i actually havent

mateen.padela — Thu, 19 Feb 2015 07:05:54 GMT

Hi Collin,

i actually havent configured CDA because first i want to try the authentication. and CDA will help me with the user based logs.

correct me if i am wrong.

-Matt

So you've added the CX to AD

Collin Clark — Fri, 20 Feb 2015 16:57:45 GMT

So you've added the CX to AD and when you hit the test button it's successful?

Yes Collin. That's right. The

mateen.padela — Fri, 20 Feb 2015 18:25:40 GMT

Yes Collin. That's right. The server IP and login details once given and tested. Shows successful.