Identity Awareness allows the Security Administrator to configure network access based on which of the following?

Application identity is a function of the Application Control blade, not Identity Awareness; Identity Awareness does not classify by application name.

While machine identity and username are valid Identity Awareness attributes, certificate-based identification is a VPN or HTTPS Inspection concept, not a core Identity Awareness dimension.

Identity Awareness extends the standard IP-based policy by adding user identity (who is logged in), machine identity (which device is being used), and network location (where the connection originates). These three attributes together allow granular, role-based access control policies beyond simple IP addresses.

Browser-Based Authentication is one method for acquiring identity data (via Captive Portal), but it is an acquisition method, not a dimension of access control alongside user identity and network location.