Cloud Web Security Connector mode with an active directory enabled supports machine authentication

Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

Cloud Web Security with Kerberos enabled supports machine authentication

If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID