Cisco Bug: CSCup75833 - Failover from TUI does not work when auth unavail set to Permit
Last Modified
Jun 29, 2018
Products (1)
- Cisco Web Security Appliance
Known Affected Releases
7.7.0-725 7.7.5-195 8.0.5-079 8.0.6-000
Description (partial)
Symptom: Users are unable to authenticate with the Cisco WSA appliance when the Cisco Active Directory agent (CDA) does not have a mapping for their IP address Conditions: 1) Transparent User Identification (TUI) enabled in authentication settings 2) Identities configured for authentication with "Identify Users transparently" option and failover configured to "NTLMSSP or Basic" 3) Under GUI --> Network --> Authentication --> Edit Global Settings --> Authentication Service Unavailable = Permit traffic to proceed without authentication
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Status
- Severity
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases