Windows Hello with WSS Agent configuration

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Windows Hello login and PIN reset doesn't work with WSS Agent enabled.

Environment

WSS Agent + SAML

Cause

WSS Agent default installation requires authentication first, then it allows the traffic.

With Windows Hello and PIN reset the traffic needs to be allowed before the user logs in.

Resolution

In order to solve this problem these steps needs to be followed:

• install WSS Agent with AU=unauthenticated option (syntax available in https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/cloud-swg/help/conn-about-wssa/install-agent-windows/conn-wssa-win-cli.html)
• configure bypasses for domains and IPs that Windows Hello uses for its authentication
• bypass login.microsoftonline.com from authentication