Cisco CCNP Security Core (SCOR) 350-701Content SecurityMedium
A company is integrating its Cisco Secure Web Appliance (WSA) with its existing identity management system (Cisco ISE) to implement user-based web access policies. The goal is to ensure that different user groups (e.g., 'Developers', 'Marketing') have varying levels of internet access and content filtering, and that these policies follow users regardless of which device they use or where they connect from within the corporate network. Which integration method is most effective for achieving this user-aware content security?
- AWSA relying solely on IP address-based access control lists (ACLs).
- BWSA integrated with Active Directory via NTLM for authentication.
- CWSA configured with local user accounts and groups.
- DWSA integrated with Cisco ISE for user and group identity context.
Show answer & explanationAnswer & explanation
Correct answer: D. WSA integrated with Cisco ISE for user and group identity context.
Integrating the Cisco WSA with Cisco ISE provides the most robust and flexible solution for user-based web access policies. ISE acts as a central identity management system, providing the WSA with real-time user and group context, enabling policies that follow users regardless of their device or location.
Why the other options are wrong
- A. IP address-based ACLs are static and do not provide user-specific policies, especially for mobile users or shared IP environments.
- B. NTLM provides authentication but lacks the rich user and group context that ISE offers for granular policy enforcement and dynamic assignment across the network.
- C. Local user accounts are not scalable or dynamic for a large enterprise with varying user groups and mobile users.
WSA-ISE Integration
Integrating Cisco Secure Web Appliance (WSA) with Cisco Identity Services Engine (ISE) to leverage centralized identity management for applying granular, user- and group-based web access and content filtering policies.
- ISE provides user and group context to WSA.
- Enables dynamic policies that follow users across devices and locations.
- Enhances visibility and control over web usage based on identity.
Memory trick: ISE Identifies Users, WSA Wiseley Steers Access.