# Deploying the Web Security Appliance

> Markdown source of <https://docs.calebsargeant.com/networking/cisco/core-security/content-security-with-cisco-wsa-and-cisco-umbrella/2.-deploying-the-web-security-appliance/>.

## Different Deployment Modes for the WSA

### Explicit Forward Mode

- Endpoint explicitly configured to use WSA
- Can use PAC file to configure machine

### Transparent Mode

- WCCP configured
- Policy Based Routing or a L4-7 device can also be used to redirect traffic

## Licensing and Initial Setup of the WSA

``` text
interfaceconfig
setgateway
commit
```

## Finishing the Setup Using the GUI

![image1](_images/deploying-the-web-security-appliance-1.png)

![image2](_images/deploying-the-web-security-appliance-2.png)

![image3](_images/deploying-the-web-security-appliance-3.png)

![image4](_images/deploying-the-web-security-appliance-4.png)

## Integrating the WSA with Active Directory

![image5](_images/deploying-the-web-security-appliance-5.png)

## Configuring Identification Profiles

### Identification Profiles

- WSA imposes policies based off of various criteria
- Policies can use user/group information, subnet, and proxy ports
- Different identification profiles can be used for different policies

![image6](_images/deploying-the-web-security-appliance-6.png)