Surf Control v5.5 manual Methods of Installing EUM, EUM Agent on Domain Controllers

Models: v5.5

1 77
Download 77 pages 20.24 Kb
Page 19
Image 19

2

INSTALLATION DECISIONS

User Name Resolution

METHODS OF INSTALLING EUM

You can install EUM in one of two ways:

1Install an EUM Agent on your domain controllers or Novell NetWare NDS Tree Server.

2Install an EUM Login Agent on your network that can monitor all users via a login script. (page 17)

Installing the EUM Agent on your Domain controllers works well in a LAN environment where all users log on to the Windows domain. If you do not have access to, or do not wish to install the EUM Agent on your domain controller, you can use the EUM Login Agent.

THE EUM AGENT ON DOMAIN CONTROLLERS

You can install the EUM Agent on domain controllers which have the following operating systems:

Windows NT

Windows 2000

Windows 2003 (Standard and Enterprise)

Windows 2003 x64 (Standard and Enterprise)

There is also a version of the EUM Agent that works with Novell NetWare. This is explained further in "NetWareEUM" on page 16.

During the installation, the configuration file scua.ini is installed into the c:\Surfcontrol User Agent folder on each domain controller. This file contains connection information about your Web Filter server(s) and identifies ignored users, which are specified during the installation. Additional domain controllers and/or ignored users can also be added to your EUM Agent configuration at a later date. For further details about installing the EUM Agent and post configuration tasks, refer to the following sections:

"Installing the EUM Agent on your domain controllers" on page 53

"Making changes to the EUM Agent configuration" on page 55

EUM on Windows 2000 and 2003 domain controllers

The EUM agent is installed on to Windows 2000 and 2003 domain controllers as a driver file called ScSubAuth.dll. If you are installing EUM on a Windows 2003 x64 operating system, the driver file ScSubAuth_AMD64.dll is loaded on to the domain controller during installation. When EUM is installed on to a Windows 2000 or 2003 server, Web Filter uses Microsoft’s Sub-Authentication to resolve user names.

EUM on Windows NT domain controllers

Web Filter installs the EUM User Agent (UA) on to Windows NT domain controllers as a service (SurfControl User Agent service; ScUserAgent.exe). During EUM installation, Web Filter configures NT domain controllers to record Successful Logons to the security log (event 528). If you make changes to this audit policy and disable event 528 logs (Successful Logon), EUM will not work correctly.

Confirm that event 528 logs are enabled by performing the following:

1From the Web Filter server, select User Manager for Domains from the Programs > Administrative Tools menu.

14 Starter Guide

SurfControl Web Filter for ISA v5.5

Page 19
Image 19
Surf Control v5.5 manual Methods of Installing EUM, EUM Agent on Domain Controllers, EUM on Windows NT domain controllers