Multiple Userid Agents

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Multiple Userid Agents

L4 Transporter

We are deploying UserID with username policy enforcement and the concern is agent resilience. We do not want to use the firewall built in agent and the server team does not allow agent installation on a domain controller. The plan is to install the agent on dedicated windows server  and to monitor all domain controllers, but t if the server hosting the agent fails, mapping can be lost.

 

Can we have two or more UserID agents monitoring the same set of domain controllers and added to a single firewall? Would this create duplicate or conflicting user ID mappings?

1 accepted solution

Accepted Solutions

L6 Presenter

As @Mick_Ball it works perfectly fine.  The only concern would potentially be the impact to the a remote site (if that's part of your design) on circuit BW consumption.

 

Since UIAs pull all DC logs if the DC is really busy you might end up with ~500-750Kbps of circuit usage with the double hit.

View solution in original post

2 REPLIES 2

L7 Applicator

@BatD , yes, multiple agents to the same firewall works fine.

we have 2 agents monitoring the same DC's (8 in total) and both agents are configured on all of our firewalls.

 

 

L6 Presenter

As @Mick_Ball it works perfectly fine.  The only concern would potentially be the impact to the a remote site (if that's part of your design) on circuit BW consumption.

 

Since UIAs pull all DC logs if the DC is really busy you might end up with ~500-750Kbps of circuit usage with the double hit.

  • 1 accepted solution
  • 4301 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!