Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuration > Configuring Web components > Preparing for a hybrid configuration
Preparing for a hybrid configuration
In TRITON AP-WEB environments with the Web Hybrid module, some users' traffic may be handled by the hybrid (cloud) service. In this situation, an interoperability component on the appliance called Directory Agent is required to enable user-, group-, and domain- (OU) based security.
Directory Agent must be able to communicate with:
*
A supported LDAP-based directory service:
*
Windows Active Directory® (Mixed Mode)
*
Windows Active Directory (Native Mode®)
*
Oracle (Sun Java™) System Directory
*
Novell eDirectory
*
Websense Sync Service
After deployment, use Web module of the TRITON Manager to configure User Service and Directory Agent.
*
User Service configuration is performed on the Settings > General > Directory Services page.
*
Directory Agent configuration is performed on the Settings > Hybrid Configuration > Shared User Data page.
*
You can have multiple Directory Agent instances.
*
Each Directory Agent must use a unique, non-overlapping root context.
*
Each Directory Agent instance must be associated with a different Policy Server.
*
All Directory Agent instances must connect to a single Sync Service. (A deployment can have only one Sync Service instance.)
*
You must configure the Sync Service connection manually for all supplemental Directory Agent instances (these are the Directory Agents running on User Directory and filtering, and Filtering only appliances). Communication is configured automatically for the Directory Agent instance that connects to the same Policy Server as Sync Service. See Administrator Help of the Web module for details.
You can configure Directory Agent to use a different root context than User Service, and to process its directory data differently than User Service. Also, with Windows Active Directory, if User Service is configured to communicate with multiple global catalog servers, Directory Agent can communicate with all of them.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuration > Configuring Web components > Preparing for a hybrid configuration
Copyright 2016 Forcepoint LLC. All rights reserved.