Surf Control v5.5 manual User Name Resolution

Page 61

4

FURTHER CONFIGURATION

User Name Resolution

The EUM Agent on the domain controller will wait ten minutes before checking for any changes made in the scua.ini file. The frequency of this can be changed by altering a registry setting on individual domain controllers. To change this value, perform the following:

1On the domain controller, launch the Windows registry.

2Depending on your operating system, navigate to one of the following keys:

Windows 2000 and 2003 HKLM\SOFTWARE\JSB\SurfControl SubAuth\ConfigReRead

Windows NT

HKLM\SOFTWARE\JSB\SurfControl EUM\ConfigReReadd

3Edit the ConfigReRead value to the desired amount in seconds. By default, this value is set to 600 seconds (10 minutes).

There are two ways to add domain controllers or ignored users to the EUM Agent configuration:

Use the EUM Installation Wizard.

Manually edit the scua.ini file on each domain controller.

Using the EUM installation wizard. To start the wizard, follow the instructions in the Installing the EUM Agent on your domain controllers section. The installation wizard will automatically detect if the EUM Agent is already installed, and you can select additional domain controllers and/or ignored users to add to your existing EUM configuration.

Manually edit the scua.ini file. By default, the scua.ini file contains the host name and listening port number of the Web Filter server from which you initially installed the EUM Agent, and any ignored users you specified during the installation. You can add extra Web Filter servers to the file, if you want user login information to be returned from your domain controllers to multiple Web Filter servers. Below is an example of the scua.ini file:

[surfCONTROL_Services]

192.168.4.125=61695

192.168.4.119=61695

192.168.4.215=61695

[ignored_users]

domain\user1.test=1

domain\user2.test=1

domain\user3.test=1

To manually edit the file:

1 On the domain controller, open the c:\Surfcontrol User Agent\scua.ini file.

56 Starter Guide

SurfControl Web Filter for ISA v5.5

Image 61
Contents SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter ISA Server Microsoft ISA Server EditionHOW WEB Filter and ISA Server Interact Hardware Requirements System RequirementsGeneral System Requirements SQL Server Licensing System Requirements Installation Decisions Introduction User Name ResolutionNetwork Considerations Database OptionsDeployment Recommendations Network ConsiderationsDMZ Recommendations Network Considerations Web Filter communication ports Firewall Port ConfigurationISA Server ISA Server AuthenticationISA Server 2004/2006 EUM User Name ResolutionEUM Agent on Domain Controllers Methods of Installing EUMEUM on Windows 2000 and 2003 domain controllers EUM on Windows NT domain controllersBefore installation Ignoring Users in NetWare EUM NetwareeumLogging Levels Installing the Login Agent on NT Domains EUM Login AgentInstalling the Login Agent on Windows 2000 Login Agent LocationBelow is a copy of the supplied .ini file EumLogin.ini fileEumLogin.ini file sections How to configure the fileAdd an Exception to the Windows Firewall Configuring a logon and logoff scriptDatabase Platforms Database ConsiderationsSQL Server Express SQL Server minimum requirements on Web Filter server SQL ServerReasons to Install SQL Server on a Dedicated Server Database AuthenticationWindows Authentication SQL AuthenticationInternet Threat Database Other ConsiderationsCategorization Options Internet Threat Database Improvement ProgramMail Notifications Remote Administration ClientPrivacy Edition Considerations Remote Administration Client minimum requirementsInstalling Web Filter NetWare client on to the Web Filter server Installation ProcessInstalling SQL Server Express Optional Select I accept the terms of the license agreement Installing Surfcontrol WEB FilterInstalling SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Automatic Database Management screen is displayed Internet Threat Database Update screen is displayedThreat Database Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration ALL Installations Post Installation TasksFirewall Policy Rules for ISA Server 2004 Network DependentInstalling the EUM Agent on Your Domain Controllers User Name Resolution Select Domain Controllers screen is displayed Making changes to the EUM Agent configurationUser Name Resolution Installing Netwareeum Installing the EUM Login Agent on Your NetworkUnloading the NetWare EUM Automatically loading the NetWare EUMAdd Web Filter Servers to NetWare EUM Ignored users in NetWare EUMInstall Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client InstallShield Wizard Complete screen is displayed Remote Administration Client and Windows VistaConfigure IE and the VCA Allow Internet Threat Database UpdatesFirewall Policy Rules Allow VCA Spider FunctionalityConfigure a Firewall Policy Rule for the VCA Allow the Remote Administration Client AccessFrom Access Rule Destinations, click Add From the Primary Connection Information screen, click NewSRC Allow Remote Access to Surfcontrol Report CentralEnter 8888 in the Port Range From field Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback