Users are not identified in a Cisco Wide Area Application Engine environment

Using eDirectory Agent | Web Security Solutions | Versions 7.7 and 7.8

In an environment where Websense Web Filter or Web Security is integrated with Cisco Wide Area Application Engine (formerly Cisco Content Engine) v5.3.1.5 or higher, eDirectory Agent may be unable to identify users unless particular setup guidelines are followed. You need to:

Install and run these Websense services on the same machine as Cisco WAE (Content Engine):

Websense eDirectory Agent

Websense User Service

Websense Filtering Service

Websense Policy Server

Ensure that all Novell eDirectory replicas are added to the wsedir.ini file on the same machine. This file is located in the Websense installation directory (C:\Program Files or Program Files (x86)\Websense\Web Security\bin or /opt/Websense/bin/, by default).

Stop the eDirectory Agent service.

On the eDirectory Agent machine, go to the eDirectory Agent installation directory.

Open the file wsedir.ini in a text editor.

Locate the [eDirAgent] section.

For each new instance of eDirectory server, add the line

Server=ip_address:port

Here, ip_address is the IP address or name of the machine running eDirectory or an eDirectory server replica, and port is the port over which the eDirectory server connects to Websense eDirectory Agent. Be sure to use a valid port number.

For any instance of eDirectory server that no longer exists, remove the line

Server=ip_address:port

Save and close the file.

Start eDirectory Agent.

Delete the eDirAgent.bak file from the machine running Websense, Cisco WAE (Content Engine) and eDirectory Agent. By default, eDirAgent.bak is in the Websense bin directory.

Run any Websense reporting tools on a machine separate from Cisco WAE (Content Engine) and Websense software.