Surf Control v5.5 manual Before installation

Page 20

INSTALLATION DECISIONS

User Name Resolution

2

2From the menu, select Policies Audit. Ensure that Audit these Events is checked.

3Ensure security logs are set to overwrite as needed. Do not manually clear the security logs.

Before installation

Prior to installing the EUM UA on to an NT domain controller, ensure the trust relationships are set up for multiple domain environments.

Note: The trust relationship should be configured so that Web Filter is Trusted, and all other domains are Trusting.

During installation, Web Filter installs the EUM UA on to each domain controller. Before installing EUM, ensure the following:

The Web Filter server must have a static IP address.

The installer must be logged into the Web Filter server as a user with domain administration rights.

For a successful automatic installation, Web Filter must be able to see the domains that require EUM. Make sure Web Filter is located in the appropriate domain.

In a two-way trusted environment, the Web Filter server can be located in any domain.

If a one-way model is in use, the Web Filter server should be located in the master domain (this enables Web Filter to see all other domains).

For Windows NT domain controllers, make sure the security logs of all domain controllers are set to overwrite events as needed.

By default, EUM uses port 61695 to communicate with the Web Filter server. Perform the following steps to change the port:

1)Add the following key to the SurfControl registry:

HKEY_LOCAL_MACHINE\SOFTWARE\JSB\SurfControlScout\UserAgentPort

2)Add the key as a DWORD, specify a decimal value (default is 61695).

3)Stop and start the Web Filter service.

4)Update the scua.ini file on the domain controllers to reflect the port changes.

SurfControl recommends installing EUM when there are few or no users on the network or when a forced log off can be scheduled.

During installation, you’ll be prompted to identify specific user accounts that UA should ignore. You should only use this option for accounts similar to SMS or service accounts (for instance, backup.exe, anti-virus updates, servers).

Caution: Ignoring valid user accounts will result in mis-identification.

SurfControl Web Filter for ISA v5.5

Starter Guide 15

Image 20
Contents SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter HOW WEB Filter and ISA Server Interact Microsoft ISA Server EditionISA Server System Requirements Hardware RequirementsGeneral System Requirements SQL Server Licensing System Requirements Installation Decisions User Name Resolution IntroductionNetwork Considerations Database OptionsDMZ Recommendations Network ConsiderationsDeployment Recommendations Network Considerations Firewall Port Configuration Web Filter communication portsISA Server 2004/2006 ISA Server AuthenticationISA Server User Name Resolution EUMMethods of Installing EUM EUM Agent on Domain ControllersEUM on Windows 2000 and 2003 domain controllers EUM on Windows NT domain controllersBefore installation Logging Levels NetwareeumIgnoring Users in NetWare EUM EUM Login Agent Installing the Login Agent on NT DomainsInstalling the Login Agent on Windows 2000 Login Agent LocationEumLogin.ini file Below is a copy of the supplied .ini fileHow to configure the file EumLogin.ini file sectionsConfiguring a logon and logoff script Add an Exception to the Windows FirewallSQL Server Express Database ConsiderationsDatabase Platforms SQL Server SQL Server minimum requirements on Web Filter serverDatabase Authentication Reasons to Install SQL Server on a Dedicated ServerWindows Authentication SQL AuthenticationOther Considerations Internet Threat DatabaseCategorization Options Internet Threat Database Improvement ProgramRemote Administration Client Mail NotificationsRemote Administration Client minimum requirements Privacy Edition ConsiderationsInstalling Web Filter Installation Process NetWare client on to the Web Filter serverInstalling SQL Server Express Optional Installing Surfcontrol WEB Filter Select I accept the terms of the license agreementInstalling SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Threat Database Internet Threat Database Update screen is displayedAutomatic Database Management screen is displayed Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration Post Installation Tasks ALL InstallationsFirewall Policy Rules for ISA Server 2004 Network DependentInstalling the EUM Agent on Your Domain Controllers User Name Resolution Making changes to the EUM Agent configuration Select Domain Controllers screen is displayedUser Name Resolution Installing the EUM Login Agent on Your Network Installing NetwareeumAutomatically loading the NetWare EUM Unloading the NetWare EUMAdd Web Filter Servers to NetWare EUM Ignored users in NetWare EUMInstall Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client Remote Administration Client and Windows Vista InstallShield Wizard Complete screen is displayedAllow Internet Threat Database Updates Configure IE and the VCAFirewall Policy Rules Allow VCA Spider FunctionalityAllow the Remote Administration Client Access Configure a Firewall Policy Rule for the VCAFrom Access Rule Destinations, click Add From the Primary Connection Information screen, click NewEnter 8888 in the Port Range From field Allow Remote Access to Surfcontrol Report CentralSRC Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback