ASA-CX Module Authentication Solution

[zakid]

we have CX-Module with the latest version , we are facing some bandwidth issues with some users , we want to limit these users and block some websites for them 

but the issue that , these Users is a DHCP , and we cannot apply a policy for  all subnet 

I thought to control it by MAC address , but CX-Module doesn`t support that

 So ; is there any authentication Solution on CX-Module so can control these users by the user name 

But Locally on Cx-Module NOT Users joining the Domain  

[Vibhor Amrodia]

You can try to apply the policies for the DHCP scope of IP addresses that you are using.

The CX would not be able to use the LOCAL usernames without having a AD server.

Thanks and Regards,

Vibhor Amrodia

[oguevara08]

Dude you need to setup the Cisco Context Directory Agent. This will allow it to integrate to your active  directory. Then is just a matter of putting the users into a AD group (ex. Restricted Bandwidth Group) and making a policy in PRSM for the group. On the policy there is an option to throttle traffic. I do this to the really bad users.