I'm currently doing a trial run of IronPort. I have a S730 WSA in a lab environment. I have alot of experience with webfilters in general (Barracuda, Websense, Marshal8e6, etc) and most of those applications have some type of Active Directory agent...