Global Policy - ALL Identity

Unanswered Question
Oct 27th, 2008
User Badges:


I have 2 WSA's running on version 5.6.x

Im just wonderin why the GLOBAL Policy is using ALL Identity instead of

Global Identity since this is a default policy.

Are there any write ups for this one?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jowolfer Mon, 10/27/2008 - 15:51
User Badges:


At the access policy layer, the default policy needs to specify what action to have in case there is no authentication.

For example, You may create an Identity policy to not authenticate certain traffic, such as Windows Update.

The global policy must be the final decision for all traffic (authenticated and not) and thus cannot be linked to an Identity policy (which may or may not require authentication).

Hope this helps.

angfeglandagan Tue, 10/28/2008 - 09:16
User Badges:

Thanks, that is correct.

But i just found out that my other WSA is using a GLOBAL IDENTITY.. as per support... it shouldnt be the case..

im using version 5.6.0-611


jowolfer Tue, 10/28/2008 - 17:48
User Badges:


Ah... You are running into upgrade defect 43812. This will be fixed in one of the upcoming versions.

This may or may not have policy matching side effects.

You should be able to upgrade to build 618 which fixes this issue.


This Discussion