topic Re: UserID instances in General Topics

UserID instances

soporteseguridad — Tue, 08 Mar 2016 08:20:57 GMT

I would like to know if we can use the same UserID agent software for 2 domains in different windows machines. If we cant do it, we need to know if we can run 2 diferent instances of UserId agent in the same windows machine pointing to 2 different domains.

Re: UserID instances

torm — Wed, 09 Mar 2016 09:26:06 GMT

User-ID agent only supports one domain pr. agent. So if you have 2 different domains, you should run the agent on 2 different windows servers and monitor 1 domain pr agent. Then set up your fw to talk to both agents servers.

Don't think it's possible to run two instances of the agent on the same machoine.

Re: UserID instances

Lucky — Wed, 09 Mar 2016 18:13:21 GMT

Hi,

I did not know the answer to that question above and I passed answering (thanks Torm! for response) but I have two cents to add:

- you should avoid setting up agent on AD server itself,

- you can always install additional copy of Windows server and forward domain security logs to it, and install agent onto it - to get dedicated Windows machine for agent. This helps to avoid stress to "regular" servers with large environments and lots of users, it is easier to deploy extra host just to serve for AgentID.

Best regards

Luciano

Re: UserID instances

Brandon_Wertz — Mon, 14 Mar 2016 21:09:41 GMT

@soporteseguridad

Yes, provided you have a domain trust for the domain in which the service account that runs the software exists.

We have 7 different domains in our enviornment and our UIA enviornment can successfully see users in the necessary domains.