Cisco Cisco Web Security Appliance S170 사용자 가이드

 shows how the Web Proxy evaluates a client request against 

the Identity groups when the Identity is configured to use:

No authentication surrogates

IP addresses as authentication surrogates

Cookies as authentication surrogates with transparent requests

Cookies as authentication surrogates with explicit requests and credential 
encryption is enabled

 shows how the Web Proxy evaluates a client request against 

the Identity groups when the Identity is configured to use cookies as the 
authentication surrogates, credential encryption is enabled, and the request is 
explicitly forwarded.