Access Policy: (null)

[mizwan.saib-c]

Hi Support Community,

I have an issue with my client WSA. One of their users cannot access Facebook. So they run policy match from their WSA GUI to detect which policy this user hit that makes him unable to access Facebook. The result is shown below (1). We tried to do policy match to Youtube from this user too. The result is shown below (2). There's one user with the output (1) but he still manages to access Facebook. This WSA running firmware version 9.0.1-162.

(1) Policy Match
    Cisco Data Security policy: None
    Decryption policy: None
    Routing policy: Global Routing Policy
    Identification Profile: dialogasia
    Access policy: (null)

(2) Policy Match
    Cisco Data Security policy: None
    Decryption policy: None
    Routing policy: Global Routing Policy
    Identification Profile: dialogasia
    Access policy: Management Pass

[Handy Putra]

Hi,

This is occurs normally if you have authentication enabled in the Identity (dialogasia) and in policy trace you have not specify the authentication and the user name or the appliance unable to search the username from the AD server.

Regards

Handy Putra

[mizwan.saib-c]

Hi Handy Putra,

Sorry for the late reply. Thank you for your response. This issue have been solved. This is issue is actually caused by traffic for certain activity from WSA to load balancer been dropped accidentally. 

Thanks