Components > Logon Agent

Logon Agent

Applies to

Web Filter v7.6

Web Security v7.6

Web Security Gateway v7.6

Web Security Gateway Anywhere v7.6

Description

Logon Agent is a Websense transparent identification agent that detects users as they log on to Windows domains in your network. It is for use with Windows-based client machines on a network that uses Active Directory or Windows NT Directory. Logon Agent:

Provides unsurpassed accuracy in transparent user identification in Linux and Windows networks.

Does not rely on a directory service or other intermediary when capturing user logon sessions.

Detects user logon sessions as they occur.

Logon Agent communicates with Logon Application on client machines to ensure that individual user logon sessions are captured and processed directly by Websense software.

Placement

In a Websense appliance-based deployment, Logon Agent must be installed on a separate Windows machine. It does not run on an appliance.

Do not install Logon Agent on the same machine as eDirectory Agent, because this can cause conflicts. Also, do not use Logon Agent in a network in which eDirectory Agent is used.

Special Considerations

To use Logon Agent, you must modify the Group Policy on domain controllers so it launches a Logon Application (LogonApp.exe) as part of the logon script. Client machines must use NTLM (v1 or v2) when authenticating users (NTLMv1 only, in the case of Windows Server 2008; see note below). For instructions on configuring domain controllers and client machines to use Logon Agent, see Creating and running the script for Logon Agent.

Logon Agent can be run with DC Agent if some of the users in your network are not being authenticated properly. If DC Agent is unable to identify certain users (for example, if it is unable to communicate with a domain controller due to network bandwidth or security restrictions), they would still be identified by Logon Agent at log on.

Components > Logon Agent