Table of Contents
Advertisement
discover updated user information. The Event Polling Time option provides a way to specify this interval.
The minimum is five seconds, and the maximum is 300 seconds, with a default of 10 seconds.
7
Select the Preserve users during service restart checkbox to save user information across a service
restart.
After restarting the SSO Agent service, the user information is restored. Because the SSO Agent must be
restarted for Properties changes to take effect, this allows the agent to maintain current user
information across these restarts. When a backup is older than 15 minutes, the information is not
restored to avoid restoring outdated information.
If this option is unchecked when using DC security log, the user information is not saved during a service
restart. When the next user information request comes in for a previously logged in user, the DC logs are
checked, but there is no new logon event and so the user is not identified. If Query Source is set to DC
security log only, the SSO Agent sends no user information to the appliance. If Query Source is set to DC
security log with NETAPI or WMI, the agent does a NETAPI or WMI query to the user PC to identify the
user.
8
Optionally select the Add LogWatcher Support checkbox. For information about LogWatcher, see
LogWatcher
on page
•
Enter the LogWatcher Port number (default is 2259).
•
Enter the LogWatcher Shared Key.
NOTE:
Controller must be the same as the LogWatcher Port number and LogWatcher Shared Key.
9
Optionally select the Add NetBIOS mapping support checkbox.
For information about the NetBIOS option, see
10 If multiple SSO Agents exist, select the Allow Agent synchronization checkbox to allow Agent-to-Agent
communication. For information about Agent synchronization, see
on page
7
and
Configuring Agent-to-Agent communication
11 For Agent sync Port, if Allow Agent synchronization is enabled, enter the port number of the
synchronization port that the SSO Agents should use. The default is 2260.
12 Click Apply to restart the service with the new settings and stay on the page.
13 Click OK to restart the service with the new settings and close the page.
14 If a domain controller is not already added, configure the domain controller information in the
Configuration Tool. See
Installing and configuring LogWatcher
The Add LogWatcher Support option is available when a DC Security Log method is selected for Query Source.
The LogWatcher installer is available on MySonicWALL with the SSO group in the Download Center. The
installation setup program checks for pre-requisites during the installation process. LogWatcher can be installed
on all Domain Controllers.
After installation, LogWatcher needs to be configured to communicate with the SSO Agent and Directory
Services Connector. The administrator must open the install folder and change the DCConfig.xml as described
below. A readme.txt file is launched at the end of the installation which describes this procedure.
Logon Audit must be enabled on the domain controller.
12
and
Installing and configuring LogWatcher
The SSO port number and shared key in the DCConfig.xml file on the Domain
Adding domain controllers
on page 42.
About NetBIOS mapping support
About Agent-to-Agent communication
on page 35.
on page 33.
Dell SonicWALL Directory Services Connector 3.7
About
on page 12.
42
Administration Guide
Advertisement
Table of Contents
