cisco web security appliance local authentication

[ezzaariyouness]

Hello Everyone,

I Cisco Web Security Appliance S395 Version 14.5.1 , I'm trying to set up local authentication for users Proxy, Can You please help about configuration steps because I didn't find any doc about that.

Best regards

Younes

[balaji.bandi]

user authentication against local users created in WSA (there are some limitations)

check the authentication how it works :

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html

[ezzaariyouness]

I didn'  see in the document how Can I create local users on the WSA, then performs authentication again those users.

[balaji.bandi · Accepted solution]

Short answer NO - the document i have provided only offer certain source be used to authentication purpose ?

[ezzaariyouness]

Thank You for your Answer . 

[Ken Stieers]

Local authentication as in the WSA maintains users and passwords?

The WSA has no facilities for that, it wants AD or LDAP.

[ezzaariyouness]

Yes, Local authentication as in the WSA maintains users and passwords 

is that not possible with WSA ?

[Ken Stieers · Accepted solution]

Correct, it's not possible on WSA.
Your options are
AD via NTLM or Kerberos
Or
LDAP

[ezzaariyouness]

Thank You, @Ken Stieers  for your Answer. 

[amojarra]

Hello @ezzaariyouness 

in case, you need to have couple of custom policies, you can create some Id profile with IP address, and configure those rules for those clients, if they are having fixed IP address, on separate Network address.

Else as mentioned above, you need to define your users in Directory service.

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[ezzaariyouness]

Hi @amojarra ,

Yeah, I see that, I issue That I'm migrating Policy form other Proxy that have Local Authentication.