INSTALLATION DECISIONS
User Name Resolution
2 |
2From the menu, select Policies Audit. Ensure that Audit these Events is checked.
3Ensure security logs are set to overwrite as needed. Do not manually clear the security logs.
Before installation
Prior to installing the EUM UA on to an NT domain controller, ensure the trust relationships are set up for multiple domain environments.
Note: The trust relationship should be configured so that Web Filter is Trusted, and all other domains are Trusting.
During installation, Web Filter installs the EUM UA on to each domain controller. Before installing EUM, ensure the following:
•The Web Filter server must have a static IP address.
•The installer must be logged into the Web Filter server as a user with domain administration rights.
•For a successful automatic installation, Web Filter must be able to see the domains that require EUM. Make sure Web Filter is located in the appropriate domain.
–In a
–If a
•For Windows NT domain controllers, make sure the security logs of all domain controllers are set to overwrite events as needed.
•By default, EUM uses port 61695 to communicate with the Web Filter server. Perform the following steps to change the port:
1)Add the following key to the SurfControl registry:
HKEY_LOCAL_MACHINE\SOFTWARE\JSB\SurfControlScout\UserAgentPort
2)Add the key as a DWORD, specify a decimal value (default is 61695).
3)Stop and start the Web Filter service.
4)Update the scua.ini file on the domain controllers to reflect the port changes.
•SurfControl recommends installing EUM when there are few or no users on the network or when a forced log off can be scheduled.
•During installation, you’ll be prompted to identify specific user accounts that UA should ignore. You should only use this option for accounts similar to SMS or service accounts (for instance, backup.exe,
Caution: Ignoring valid user accounts will result in
SurfControl Web Filter for ISA v5.5 | Starter Guide 15 |