Configuring an agent to ignore certain user names

Web Security Help | Web Security Solutions | Version 7.8.x

You can configure a transparent identification agent to ignore logon names that are not associated with actual users. This feature is often used to deal with the way that some Windows 200x and XP services contact domain controllers in the network.

For example, user1 logs on to the network, and is identified by the domain controller as computerA/user1. That user is filtered by a Websense policy assigned to user1. If a service starts up on the user's machine that assumes the identity computerA/ServiceName to contact the domain controller, this can cause policy enforcement problems. Websense software treats computerA/ServiceName as a new user with no policy assigned, and applies the computer policy, or the Default policy.

To address this issue:

Stop the agent service (see Stopping and starting Websense services).

Navigate to the \Websense\bin\ directory, and open the ignore.txt file in a text editor.

Enter each user name on a separate line. Do not include wildcard characters, such as "*":

maran01
WindowsServiceName

Websense software ignores these user names, regardless of which machine they are associated with.

To prompt Websense software to ignore a user name within a specific domain, use the format username, domain.

aperez, engineering1

When you are finished, save and close the file.

Restart the agent service.

The agent ignores the specified user names, and Filtering Service does not consider these names in policy enforcement.