Surf Control v5.5 manual User Name Resolution, Installing the EUM Agent on Your Domain Controllers

Page 58

FURTHER CONFIGURATION

User Name Resolution

4

USER NAME RESOLUTION

By default, SurfControl Web Filter resolves user names by issuing a NetBIOS query based on the MAC address. Web Filter also includes the Enterprise User Monitor (EUM) utility for resolving user names in a routed network. You can also use ISA Server to authenticate your users. See "ISA Server Authentication" on page 12 for more details.

For more details on how EUM works, see "ISA Server Authentication" on page 12.

You can install EUM in one of the following ways:

Install the EUM Agent on all your domain controllers.

Install the EUM Login Agent on your network.

Install NetWareEUM on your NDS Tree Servers.

INSTALLING THE EUM AGENT ON YOUR DOMAIN CONTROLLERS

Before proceeding with the EUM Agent installation, check the following:

Make sure that the Web Filter server has a static IP address.

Make sure you have administrative privileges on all domain controllers where the User Agent will be installed.

Make sure the Web Filter server is located in the correct domain.

Make sure the firewall or router allows traffic through the provisioned port (default is 61695).

For Windows NT domain controllers, make sure the security logs of the domain controllers are set to overwrite events as needed.

Try to perform this procedure when there are few or no users on the network, or when a forced log off can be scheduled. This ensures the fastest, most accurate detection of users.

To install the EUM Agent on to your Domain Controllers:

1From the Start menu, select Programs > SurfControl Web Filter > Enterprise User Monitoring > Install Enterprise User Monitoring.

SurfControl Web Filter for ISA v5.5

Starter Guide 53

Image 58
Contents SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter ISA Server Microsoft ISA Server EditionHOW WEB Filter and ISA Server Interact System Requirements Hardware RequirementsGeneral System Requirements SQL Server Licensing System Requirements Installation Decisions Network Considerations User Name ResolutionIntroduction Database OptionsDeployment Recommendations Network ConsiderationsDMZ Recommendations Network Considerations Firewall Port Configuration Web Filter communication portsISA Server ISA Server AuthenticationISA Server 2004/2006 User Name Resolution EUMEUM on Windows 2000 and 2003 domain controllers Methods of Installing EUMEUM Agent on Domain Controllers EUM on Windows NT domain controllersBefore installation Ignoring Users in NetWare EUM NetwareeumLogging Levels Installing the Login Agent on Windows 2000 EUM Login AgentInstalling the Login Agent on NT Domains Login Agent LocationEumLogin.ini file Below is a copy of the supplied .ini fileHow to configure the file EumLogin.ini file sectionsConfiguring a logon and logoff script Add an Exception to the Windows FirewallDatabase Platforms Database ConsiderationsSQL Server Express SQL Server SQL Server minimum requirements on Web Filter serverWindows Authentication Database AuthenticationReasons to Install SQL Server on a Dedicated Server SQL AuthenticationCategorization Options Other ConsiderationsInternet Threat Database Internet Threat Database Improvement ProgramRemote Administration Client Mail NotificationsRemote Administration Client minimum requirements Privacy Edition ConsiderationsInstalling Web Filter Installation Process NetWare client on to the Web Filter serverInstalling SQL Server Express Optional Installing Surfcontrol WEB Filter Select I accept the terms of the license agreementInstalling SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Automatic Database Management screen is displayed Internet Threat Database Update screen is displayedThreat Database Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration Firewall Policy Rules for ISA Server 2004 Post Installation TasksALL Installations Network DependentInstalling the EUM Agent on Your Domain Controllers User Name Resolution Making changes to the EUM Agent configuration Select Domain Controllers screen is displayedUser Name Resolution Installing the EUM Login Agent on Your Network Installing NetwareeumAdd Web Filter Servers to NetWare EUM Automatically loading the NetWare EUMUnloading the NetWare EUM Ignored users in NetWare EUMInstall Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client Remote Administration Client and Windows Vista InstallShield Wizard Complete screen is displayedFirewall Policy Rules Allow Internet Threat Database UpdatesConfigure IE and the VCA Allow VCA Spider FunctionalityFrom Access Rule Destinations, click Add Allow the Remote Administration Client AccessConfigure a Firewall Policy Rule for the VCA From the Primary Connection Information screen, click NewSRC Allow Remote Access to Surfcontrol Report CentralEnter 8888 in the Port Range From field Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback