Filter
Top Products
SurfControl Web Filter for ISA v5.5 Starter Guide 15
I
NSTALLATION
D
ECISIONS
User Name Resolution
2
2 From the menu, select Policies Audit. Ensure that Audit these Events is checked.
3 Ensure security logs are set to overwrite as needed. Do not manually clear the security logs.
Before installation
Prior to installing the EUM UA on to an NT domain controller, ensure the trust relationships are set up for
multiple domain environments.
During installation, Web Filter installs the EUM UA on to each domain controller. Before installing EUM,
ensure the following:
• The Web Filter server must have a static IP address.
• The installer must be logged into the Web Filter server as a user with domain administration rights.
• For a successful automatic installation, Web Filter must be able to see the domains that require EUM.
Make sure Web Filter is located in the appropriate domain.
– In a two-way trusted environment, the Web Filter server can be located in any domain.
– If a one-way model is in use, the Web Filter server should be located in the master domain (this
enables Web Filter to see all other domains).
• For Windows NT domain controllers, make sure the security logs of all domain controllers are set to
overwrite events as needed.
• By default, EUM uses port 61695 to communicate with the Web Filter server. Perform the following
steps to change the port:
1) Add the following key to the SurfControl registry:
HKEY_LOCAL_MACHINE\SOFTWARE\JSB\SurfControlScout\UserAgentPort
2) Add the key as a DWORD, specify a decimal value (default is 61695).
3) Stop and start the Web Filter service.
4) Update the scua.ini file on the domain controllers to reflect the port changes.
• SurfControl recommends installing EUM when there are few or no users on the network or when a
forced log off can be scheduled.
• During installation, you’ll be prompted to identify specific user accounts that UA should ignore. You
should only use this option for accounts similar to SMS or service accounts (for instance, backup.exe,
anti-virus updates, servers).
Note: The trust relationship should be configured so that Web Filter is Trusted, and all other
domains are Trusting.
Caution: Ignoring valid user accounts will result in mis-identification.