Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Community Member

Global Policy - ALL Identity

Hi,

I have 2 WSA's running on version 5.6.x

Im just wonderin why the GLOBAL Policy is using ALL Identity instead of

Global Identity since this is a default policy.


Are there any write ups for this one?

regards,
kira

3 REPLIES
Community Member

Re: Global Policy - ALL Identity

Kira,

At the access policy layer, the default policy needs to specify what action to have in case there is no authentication.

For example, You may create an Identity policy to not authenticate certain traffic, such as Windows Update.

The global policy must be the final decision for all traffic (authenticated and not) and thus cannot be linked to an Identity policy (which may or may not require authentication).

Hope this helps.

Community Member

Re: Global Policy - ALL Identity

Thanks, that is correct.


But i just found out that my other WSA is using a GLOBAL IDENTITY.. as per support... it shouldnt be the case..

im using version 5.6.0-611

regards,
kira

Community Member

Re: Global Policy - ALL Identity

Kira,

Ah... You are running into upgrade defect 43812. This will be fixed in one of the upcoming versions.

This may or may not have policy matching side effects.

You should be able to upgrade to build 618 which fixes this issue.

206
Views
0
Helpful
3
Replies
CreatePlease to create content