Guest

Preview Tool

Cisco Bug: CSCup75833 - Failover from TUI does not work when auth unavail set to Permit

Last Modified

Jun 29, 2018

Products (1)

  • Cisco Web Security Appliance

Known Affected Releases

7.7.0-725 7.7.5-195 8.0.5-079 8.0.6-000

Description (partial) 

Symptom:
Users are unable to authenticate with the Cisco WSA appliance when the Cisco Active Directory agent (CDA) does not have a mapping for their IP address

Conditions:
1) Transparent User Identification (TUI) enabled in authentication settings
2) Identities configured for authentication with "Identify Users transparently" option and failover configured to "NTLMSSP or Basic"
3) Under GUI --> Network --> Authentication --> Edit Global Settings --> Authentication Service Unavailable = Permit traffic to proceed without authentication
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.