07-26-2021 12:44 AM
how to enable WSA read only access with ISE, which VSA can be used for it ?
Solved! Go to Solution.
07-26-2021 01:11 AM
Create different AuthZ rules in ISE, send a different/unique class attribute value per group (RO or admin), then on the WSA map the value sent from ISE to a WSA group, in your scenario "Read-Only Operators".
07-26-2021 01:23 AM - edited 07-26-2021 01:24 AM
it works for me with ACS, should be good with ISE too try and let us know.
http://tregubov-s.blogspot.com/2015/12/cisco-ironport-external-authentication.html
07-26-2021 01:11 AM
Create different AuthZ rules in ISE, send a different/unique class attribute value per group (RO or admin), then on the WSA map the value sent from ISE to a WSA group, in your scenario "Read-Only Operators".
07-26-2021 01:23 AM - edited 07-26-2021 01:24 AM
it works for me with ACS, should be good with ISE too try and let us know.
http://tregubov-s.blogspot.com/2015/12/cisco-ironport-external-authentication.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide