Troubleshooting guide

1-18
Cisco Wide Area Application Services Configuration Guide
OL-26579-01
Chapter 1 Configuring Application Acceleration
Enabling and Disabling the Global Optimization Features
Figure 1-8 Add Domain Identity—User Account
a.
Select user account from the Account Type drop-down list.
b. Enter the identity name in the Identity Name field. Alphanumeric characters only (cannot contain
space, ?, |), not exceeding 32 characters.
c. Enter username and password information.
d. Enter the domain name.
e. Enter the Kerberos realm.
Note The domain identity must have sufficient privileges in the Windows Domain Active Directory to
replicate the desired domain information to optimize encrypted traffic. To configure privileges,
see the “Configuring Microsoft Active Directory” section on page 1-18.
Step 4 Click OK. The domain identity appears in the Encrypted Services Domain Identities list.
To configure and verify Encrypted Services Domain Identities from the CLI, use the windows-domain
encrypted-service global configuration command and the show windows-domain encrypted-service
EXEC command.
Configuring Microsoft Active Directory
To grant Cisco WAAS permission to accelerate Exchange encrypted email sessions, follow these steps:
Step 1 Using an account with Domain Administrator privileges, launch the Active Directory Users and
Computers application.
Step 2 Create a new group.
Note This group is for accounts that WAAS will use to optimize Exchange traffic. Normal users and
computers should not be added to this group.
a. Right-click the Organizational Unit (OU) to contain the new group and choose New > Group.(See
Figure 1-9.)