topic Re: Multiple Userid Agents in General Topics

Multiple Userid Agents

BatD — Fri, 22 Feb 2019 09:03:03 GMT

We are deploying UserID with username policy enforcement and the concern is agent resilience. We do not want to use the firewall built in agent and the server team does not allow agent installation on a domain controller. The plan is to install the agent on dedicated windows server and to monitor all domain controllers, but t if the server hosting the agent fails, mapping can be lost.

Can we have two or more UserID agents monitoring the same set of domain controllers and added to a single firewall? Would this create duplicate or conflicting user ID mappings?

Re: Multiple Userid Agents

Mick_Ball — Fri, 22 Feb 2019 09:40:18 GMT

@BatD , yes, multiple agents to the same firewall works fine.

we have 2 agents monitoring the same DC's (8 in total) and both agents are configured on all of our firewalls.

Re: Multiple Userid Agents

Brandon_Wertz — Fri, 22 Feb 2019 13:23:27 GMT

As @Mick_Ball it works perfectly fine. The only concern would potentially be the impact to the a remote site (if that's part of your design) on circuit BW consumption.

Since UIAs pull all DC logs if the DC is really busy you might end up with ~500-750Kbps of circuit usage with the double hit.