What is a benefit of integrating Cisco WSA with TrustSec in ISE?

The correct answer is D. Users in a specific SGT can be denied access to certain social websites. Cisco TrustSec uses Security Group Tags (SGTs) to classify network users and devices based on their identity and context. When the Cisco WSA is integrated with ISE (Identity Services Engine) and TrustSec, the WSA can read the SGT assigned to a user or endpoint and use that tag…

Differentiated Traffic Access Policies and Identification Profiles

Question

Options

AThe policy trace tool can be used to match access policies using specific SGT
BTraffic of authenticated users who use 802.1x can be tagged with SGT to identification profiles in a
CISE can block authentication for users who generate multiple sessions using suspect TCP ports
DUsers in a specific SGT can be denied access to certain social websites.

How the community answered

(42 responses)

A
14% (6)
B
7% (3)
C
2% (1)
D
76% (32)

Explanation

Cisco TrustSec uses Security Group Tags (SGTs) to classify network users and devices based on their identity and context. When the Cisco WSA is integrated with ISE (Identity Services Engine) and TrustSec, the WSA can read the SGT assigned to a user or endpoint and use that tag within its access policies. This allows administrators to create web access policies that grant or restrict access to web destinations-including social media sites-based on the user's SGT classification rather than requiring individual user or IP-based rules. Options A and B describe features that don't accurately reflect TrustSec-WSA integration, and option C describes ISE authentication blocking behavior unrelated to TrustSec tagging.

Topics

#WSA-ISE Integration#TrustSec SGT#Web Access Policies#Content Filtering

Community Discussion

No community discussion yet for this question.

Full 300-725 Practice