Context Directory Agent for ASA/WSA

[grwilli]

I have a customer who learned about Context Directory Agent (CDA) from a class they attended. It was actively used as part of class labs. However, I am only able to locate installation documentation - and that only through tangent links in the Cisco Community and the google. Nothing comes up for Context Directory Agent in Product, Support or EOL info.

I am well aware of alternative solutions, but what's the story with this product - one I can tell my customer?

[Ken Stieers]

You can get it here... It linked in the Web Security Appliance stuff

https://software.cisco.com/download/home/284288118/type/284724387/release/CDA



It will talk to Windows 2016 with patch 6.

Install the base, then install EACH patch, 1-6, in order.



We use it, even though ISE-PIC is available because ISE is overkill and a pain to set up.

OH and CDA is free...

[Cristian Matei]

Hi,

  CDA provides IP to user mappings to the WSA, via RADIUS, so that you can configure smarter policies on WSA. Here's the installation guide and the configurations guide:

https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/212917-installing-cisco-context-directory-agent.html

https://www.cisco.com/c/en/us/td/docs/security/ibf/cda_10/Install_Config_guide/cda10/cda_oveviw.html

Regards,

Cristian Matei.