ASA5515: FirePOWER & Web Security Essentials

[paul.basford]

Hi,

I have been trying to find documentation for deploying an ASA5515 FirePOWER with Web Security Essentials but struggling to find and answer to my questions. I am trying to confirm two features -

1. Is HTTPS decryption supported for URL filtering?
2. Is Active Directory integration supported in a Citrix thin-client environment? 

From what I can see the Cisco Active Directory Agent does not support thin client environments as it maps AD-USER to MACHINE IP. Obviously in a thin client environment many users will share the same machine IP.

Thanks,

Paul.

[Jernej Vodopivec]

Hi Paul,

1. HTTPS decryption is currenty not supported. It's in a roadmap and should be supported in one of next SW releases.

2. CDA is mapping ad-user to machine IP as you already wrote. So if users are sharing same IP (in a terminal server environment for example) this is not supported configuration. I'll try to find out if there is someting in the roadmap.

[peterfaber]

any news on question #2 ??