Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Community Member

WSA User moving from one policy to another

Hai ,

Can anybody faced this issue before??

We have 2 WSA s670 running in explicit model using Load Balancer.

We created access policies for different categories & integrated with AD groups also. Now, if i need to move a user from one group  in AD to another, it is not reflecting very soon and taking almost 6-7 hours. the surrogation timeout is set to default value as well.

Also, If we use Cisco CDA is there any way to fix this issue?? In document it seems CDA is used only for user to IP mapping only!!! Please suggest.

Regards,

Mohamed fayz

1 REPLY
Cisco Employee

WSA User moving from one policy to another

Hi Mohamed,

CDA will not resolve the issue.  I haven't tested this myself, but I have heard that if you make a change in the authentication realm, and submit/commit the changes, it will restart the authentication service, which will trigger the refresh of AD user groups.

-Vance

251
Views
0
Helpful
1
Replies
CreatePlease to create content