Cisco Cisco Web Security Appliance S690 Guía Del Usuario

Security Services > AnyConnect Secure Mobility, and click Enable.

Read the terms of the AnyConnect Secure Mobility License Agreement, and click Accept. 

Configure how to identify remote users.

Submit and Commit Changes.

Configure identification of remote users.

Create an identity for remote users.

In the “Define Members by User Location” 
section, select Remote Users Only.

In the “Define Members by Authentication” 
section, select “Identify Users Transparently 
through Cisco ASA Integration.” 

Create a policy for remote users.

IP Address

Specify a range of IP addresses 
that the appliance should consider 
as assigned to remote devices. 

Enter a range of IP addresses in the IP Range 
field.

Go to step 4

Cisco ASA 
Integration

Specify one or more Cisco ASA 
the Web Security appliance 
communicates with. The Cisco 
ASA maintains an IP 
address-to-user mapping and 
communicates that information 
with the Web Security appliance. 
When the Web Proxy receives a 
transaction, it obtains the IP 
address and determines the user 
by checking the IP 
address-to-user mapping. When 
users are determined by 
integrating with a Cisco ASA, 
you can enable single sign-on for 
remote users.

Enter the Cisco ASA host name or IP address. 

Enter the port number used to access the ASA. 
The default port number for the Cisco ASA is 
11999.

If multiple Cisco ASA are configured in a 
cluster, click Add Row and configure each 
ASA in the cluster. 

If two Cisco ASA are configured for high 
availability, enter only one host name or IP 
address for the active Cisco ASA.

Enter the access passphrase for the Cisco ASA.

The passphrase you enter here must match 
the access passphrase configured for the 
specified Cisco ASA.

Optional, click Start Test to verify the Web 
Security appliance can connect to the 
configured Cisco ASA.