WSA authentication by hostname

[Lemineral]

Dear Expert

Please help me, we have issue with authentication failed on cisco wsa, sometimes user getting blocked website by hostname or anauthenticated.

we using cisco wsa with active authentication kerberos going to Active directory,

hope you can give me advice

[cybersecurite2023]

Bonjour,

Est t-il possible d'avoir:

- les numéros de version des équipements et services en jeux ?

- Un schéma d'architecture

- La configuration en jeux sur les authentifications d'utilisateurs

- Les extrais de log sur ces problèmes ?

N'oubliez pas de ne pas communiquer des informations confidentielles (adresses IP, mots de passe etc.)

[balaji.bandi]

is the user single sign on on the device he is using, the those credenttial should be password to WSA and to authentication based on the user.

what WSA version ?

is this explicit proxy or transparent ?

can you post the Log  which is failing ?

check test against AD ?

is there any specific user ? or random users ?

[Lemineral]

Hello Balaji 

for WSA we using S395 series, explicit proxy with PAC file and active authentication with AD, connection to AD no issue, problem come with random user, and if i change IP on laptop user, problem will solved, but this issue really2 make me stress, please help me for your advice

[cybersecurite2023]

Et quelle est la version du WSA/S395 ?

[Lemineral]

Nous utilisons le wsa s395

[Jimena Saez]

Bonjour @Lemineral 

Balaji Bandi et Cybersecurite2023 sont heureux de vous aider, mais nous avons besoin de plus de détails...
Est-il possible pour vous de les fournir ? N'oubliez pas de masquer/effacer les informations sensibles pour vous protéger.

Balaji Bandi and Cybersecurite2023 are glad to help but we need some more details...
Is it possible for you to provide them ? Don't forget to hide/erase sensitive information to protect you.

En attente de votre retour, excellente journée à tous ! Waiting for your return, have a great day everyone!