Configuring Logon Agent

Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x

Related topics:

Identifying on-premises users transparently

Manual authentication

Configuring user identification and authentication

Logon Agent

Use the User Identification > Logon Agent page to configure a new instance of Logon Agent, as well as to configure the global settings that apply to all instances of Logon Agent.

To add a new instance of Logon Agent:

Under Basic Agent Configuration, enter the IPv4 address or hostname of the Logon Agent machine.


	Note Machine names must start with an alphabetical character (a-z), not a numeric or special character. Machine names containing certain extended ASCII characters may not resolve properly. If you are using a non-English version of web protection software, enter an IP address instead of a machine name.

Enter the Port that Logon Agent should use to communicate with other web protection components (30602, by default).

To establish an authenticated connection between Filtering Service and Logon Agent, mark Enable authentication, and then enter a Password for the connection.

Next, customize global Logon Agent communications settings. By default, changes that you make here affect all Logon Agent instances.

Under Logon Application Communication, specify the Connection port that the logon application uses to communicate with Logon Agent (15880, by default).

Enter the Maximum number of connections that each Logon Agent instance allows (200, by default).

If your network is large, you may need to increase this number. Increasing the number does increase network traffic.

To configure the default settings that determine how user entry validity is determined, you must first determine whether Logon Agent and the client logon application operate in persistent mode or nonpersistent mode (default). (More information is available in the Using Logon Agent for Transparent User Identification technical paper.)

In persistent mode, the logon application contacts Logon Agent periodically to communicate user logon information.

If you are using persistent mode, specify a Query interval to determine how frequently the logon application communicates logon information.


	Note If you change this value, the change does not take effect until the previous interval period has elapsed. For example, if you change the interval from 15 minutes to 5 minutes, the current 15-minute interval must end before the query starts occurring every 5 minutes.

In nonpersistent mode, the logon application sends user logon information to Logon Agent only once for each logon.

If you are using nonpersistent mode, specify a User entry expiration time period. When this timeout period is reached, the user entry is removed from the user map.

When you are finished making configuration changes, click OK to return to the Settings > User Identification page, then click OK again to cache your changes. Changes are not saved until you click Save and Deploy.