topic WSA C690 | AD User Authentication in Web Security

WSA C690 | AD User Authentication

hanguye3 — Mon, 11 Feb 2019 03:42:09 GMT

Hi team,

We are working on the WSA implementation which require us to apply the policies based on the AD users.

Our customer's AD database has more than 500 entries and the WSA only support the first 500 matching entries can be shown and we can not search the remains. So if i want to apply the policies for those groups which are not in the first 500 entries, i have to copy the name of the groups from the AD and paste it on the Source.

Highly appreciate that any guy met that issue before and advise us the solutions.

Thanks in advance.

Br,

hainm

Re: WSA C690 | AD User Authentication

balaji.bandi — Wed, 13 Feb 2019 19:56:49 GMT

Trying to understand the question, where is the limit you have referrring.

we do have 15000+ users in AD with NTLM, ( we have joined the WSA to AD computer group, so WSA can query the databse based on the policies deployed.

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html#con_1392997

I may be wrong understanding your requirement, please correct me.

Re: WSA C690 | AD User Authentication

Lokesh Kumar Lal — Mon, 18 Feb 2019 13:55:06 GMT

what is the WSA Async os version and authentication scheme used?