Cisco ASA Series Cli Configuration Manual page 886

Information About the Identity Firewall
Figure 1-5
the AD Agent are installed on the main site LAN. The clients are located at a remote site and connect to
the Identity Firewall components over a WAN.
Figure 1-5
Remote Site
Client
Figure 1-6
is installed on the main site LAN. However, the AD Agent is installed and access by the clients at the
remote site. The remote clients connect to the Active Directory servers at the main site over a WAN.
Figure 1-6
Remote Site
Client
AD Agent
Figure 1-7
installed at the remote site. The clients access these components locally when logging into network
resources located at the main site. The remote Active Directory server must synchronize its data with the
central Active Directory servers located at the main site.
Cisco ASA Series CLI Configuration Guide
1-6
shows a WAN-based deployment to support a remote site. The Active Directory server and
WAN-based Deployment
Enterprise Main Site
NetBIOS Probe
WAN
Login/Authentication
AD Agent
also shows a WAN-based deployment to support a remote site. The Active Directory server
WAN-based Deployment with Remote AD Agent
Enterprise Main Site
RADIUS
WAN
WMI
Login/Authentication
shows an expanded remote site installation. An AD Agent and Active Directory servers are
Chapter 1
ASA
WMI
AD Servers
ASA
mkg.example.com
AD Servers
Configuring the Identity Firewall
mkg.example.com
10.1.1.2
10.1.1.2