cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1519
Views
0
Helpful
3
Replies

WSA - S170 Transparent authentication for users

Deepak Ambotkar
Level 1
Level 1

Hello experts,

I am planning to deploy WSA 170 & few VM based for the client.

The client said he would like to use LDAP (based on AD) (they are using for existing setup that will be replaced by Cisco WSA) and would like to transparently authenticate users without having to enter username/password while accessing the Internet (all protocols).

Could you please let me know how to setup this and if there is a setting to  'no authentication' or transparent authentication.

I saw somewhere about the IP based authentication however I could not find the configuration guide for this step.

Please let me know.

Thanks,

Deepak A.

3 Replies 3

Tao Yang
Cisco Employee
Cisco Employee

Create an authentication realm for WSA and then either NTLM or Kerberos should be able to perform the transparent authentication.

Hi Tao,

Thank you for the reply.

If we choose to use NTLM, does my customer need to install CDA agent. The customer is not happy to install anything extra but he wants a transparent authentication by using either AD or LDAP without need to enter the username/password.

For LDAP, I read it needs to install e-directory on user machines which customer will not do.

Please let me know which one is simplest without requiring to install any new software AD or LDAP and not entering username/password on the browser?

Thanks,

Deepak A.

You don't need to install CDA for NTLM and you should use NTLM instead of LDAP as LDAP does not support transparent authentication.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: