Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Using DC Agent for Transparent User Identification > DC Agent deployment overview
DC Agent deployment overview
Using DC Agent | Web Protection Solutions | v8.4.x | 31-July-2017
To enable transparent user identification with DC Agent:
1.
Install DC Agent and User Service. To ensure a smooth DC Agent installation:
*
Make sure the Windows Computer Browser service is running on the server. (The installer attempts to enable the service if it is not running.)
*
Run the installer with an account that has both local and domain administrator privileges.
2.
Use the Forcepoint Security Manager to configure your product to communicate with DC Agent (see Configure DC Agent settings).
*
If User Service is running on a Linux machine, be sure to complete the WINS setup steps included in the configuration instructions.
*
Optionally, also configure your software to prompt users for logon information if transparent identification fails or is not available. See the Administrator Help for details.
3.
Use the Security Manager to identify directory clients for policy enforcement.
If your network is very large (10,000+ users or 30+ domain controllers), you may benefit from installing DC Agent on multiple machines, particularly if you have different domains in separate subnets. This way, you have ample space for files that are continually populated with user information, and the user identification process is faster.
In most cases, you need only 1 Filtering Service that communicates with every instance of DC Agent in your network. If you have installed multiple Filtering Services for load-balancing purposes, each Filtering Service must be able to communicate with every DC Agent.
Typically, User Service is installed on the same machine as Policy Server. User Service can be installed separately, as long as there is 1 instance of User Service for each instance of Policy Server.
DC Agent uses TCP (Transmission Control Protocol) to transmit data. When user data is sent to Filtering Service, roughly 80 bytes is transmitted per user name/IP address pair. The table below shows average quantities of data transferred per day, by number of users.
250 users
30 KB
2000 users
240 KB
10,000 users
1200 KB

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Using DC Agent for Transparent User Identification > DC Agent deployment overview
Copyright 2017 Forcepoint. All rights reserved.