Cisco Cisco Firepower Management Center 4000
2-7
FireSIGHT User Agent Configuration Guide
Chapter 2 Setting up a User Agent
Backing Up User Agent Configurations
Note
If you do not have both the .NET Framework and SQL CE installed, when you open the agent
executable file (
executable file (
setup.exe
), it prompts you to download the appropriate files. See
for more information.
•
The computer has TCP/IP access to the Active Directory servers you want to monitor, and uses the
same version of the Internet Protocol as the Active Directory servers. If the agent is monitoring the
Active Directory servers real-time, the computer’s TCP/IP access must be on at all times to retrieve
login data.
same version of the Internet Protocol as the Active Directory servers. If the agent is monitoring the
Active Directory servers real-time, the computer’s TCP/IP access must be on at all times to retrieve
login data.
•
The computer has TCP/IP access to the Defense Centers where you want to report data and an IPv4
address.
address.
•
The computer has an IPv6 address, if you want to detect logoffs from hosts with IPv6 addresses, or
an IPv4 address, if you want to detect logoffs from hosts with IPv4 addresses.
an IPv4 address, if you want to detect logoffs from hosts with IPv4 addresses.
•
The computer does not have a legacy agent or Version 2.x agent already installed. As these agents
do not automatically uninstall, to uninstall an existing agent, open
do not automatically uninstall, to uninstall an existing agent, open
Add/Remove Programs
in the control
panel.
Caution
If you have a previous version of the User Agent installed, you must complete a backup of the database
to retain configuration settings.
to retain configuration settings.
Continue with
Backing Up User Agent Configurations
If you have a previous version of the User Agent installed, installing a newer version of the user agent
removes your existing configuration. To preserve these configuration settings, back up the database
before installing the newer version of the user agent.
removes your existing configuration. To preserve these configuration settings, back up the database
before installing the newer version of the user agent.
Note
If you have Version 2.2 or later of the User Agent installed, you do not need to back up the database.
Configuration settings are automatically imported when you install a newer version of the user agent.
Continue with
Configuration settings are automatically imported when you install a newer version of the user agent.
Continue with
.
To retain your configuration settings:
Step 1
On the computer where you installed the agent, select
Start > Programs > Sourcefire > Configure User Agent
.
Step 2
Click the stop button (
) to stop the agent service.
Step 3
Locate
C:\SourcefireUserAgent.sdf
on the computer where the agent is installed, and copy the file
locally.
Step 4
Uninstall the Sourcefire User Agent by navigating to the control panel and opening
Add/Remove Programs
.
Remove the agent.
Step 5
Install the latest version of the User Agent. See
for more information.
Step 6
On the computer where the agent is installed, select
Start > Programs > Sourcefire > Configure User Agent
.
Step 7
Click the stop button (
) to stop the agent service.