Deploying the logon application for Mac clients

Using Logon Agent | Forcepoint Web Security and Forcepoint URL Filtering | 29-Apr-2022

To use Logon Agent with Mac clients, deploy a copy of the logon application to each client machine.

The logon application runs as a launch agent. It is started by the operating system for every logged-on user. At startup, the logon application queries Active Directory for logged user credentials, and if the user is authenticated, sends the user name and all client IP addresses (IPv4 and IPv6) to Logon Agent.

After logon, the logon application sends a periodic user logon update (every 15 minutes, by default).

When the user logs out, the logon applications sends a logout request to Logon Agent so that the user name can be removed from the user map.

When any web protection component is installed on a Windows machine, the logon application and its support files are placed in a subdirectory of the bin folder:

C:\Program Files\Websense\Web Security\bin\LogonApp\Mac

LogonApp.tar.gz: A compressed archive that contains the logon application and installation scripts:

LogonApp: The logon application executable file for Mac OS X 10.8.2 and later.

LogonApp.install: The primary installation script for LogonApp.

Helper files (LogonApp.install.local, LogonApp.isntall.common, scp.expect, and ssh.expect): Additional scripts used by the main installation script. Should not be run by themselves.

Prerequisites for running the Mac logon application

User Service and Logon Agent may be installed on different machines, but Logon Agent must be able to communicate with User Service to both send and receive information. If Logon Agent cannot communicate with User Service, users may not be identified correctly.

Before installing the logon application on any client machine, make sure:

You either have the administrator password for local installation or you have a user name and password with administrator privileges for remote installation.

The (local or remote) client machine is using Microsoft Active Directory for user authentication.