Multiple AD Domains with Secure Access Sites
Cisco Secure Access Sites let administrators create separate Secure Access deployments. Each Secure Access Site is an isolated deployment where components only communicate with other components in the same Secure Access Site. Secure Access Sites are a container to isolate sections of a large multi-site network into groups which only sync to the other components in the container. For example, Secure Access sites may be North America, Asia, and Europe or Northeast, California, Atlanta office, South Region, and London, and each Secure Access Site may be one or a combination of Active Directory (AD) sites.
This is useful in AD environments containing locations with high-latency connections, or in environments with locations whose internal IP space overlaps.