Cisco Cisco Firepower Management Center 2000
2-8
FireSIGHT User Agent Configuration Guide
Chapter 2 Setting up a User Agent
Installing a User Agent
Step 8
Locate
C:\SourcefireUserAgent.sdf
on the computer where the latest version of the agent is installed.
Replace the current file with the local backup made from the previous version of the agent.
Step 9
On the computer where the latest version of the agent is installed, select
Start > Programs > Sourcefire >
Configure User Agent
.
Step 10
Click the play button (
) to start. The agent service starts.
Continue with
Installing a User Agent
License:
FireSIGHT
After you configure permissions to connect to the Active Directory server, and whether you configured
idle remote session timeouts, install the agent.
idle remote session timeouts, install the agent.
Caution
If you have a previous version of the User Agent installed, to retain configuration settings, you must
complete a backup of the database before installation. For more information, see
complete a backup of the database before installation. For more information, see
.
The agent runs as a service using the
Local system
account. If the Windows computer where the agent is
running is connected to the network, the service continues to poll and send user data, even if a user is
not actively logged into the computer.
not actively logged into the computer.
Note
Do not make changes to the service configuration; the agent does not function correctly using a different
account.
account.
For each agent you can configure connections to five Active Directory servers and five Defense Centers.
Before you add a Defense Center connection, make sure you add the agent to the Defense Center
configuration. For more information, see
Before you add a Defense Center connection, make sure you add the agent to the Defense Center
configuration. For more information, see
or
In a high availability configuration, add both Defense Centers to the agent to enable update of user login
data to both the primary and the secondary so the data remains current on both.
data to both the primary and the secondary so the data remains current on both.
To install a User Agent:
Access:
Any
Step 1
Download the User Agent setup file (
Sourcefire_User_Agent_2.2-9_Setup.zip
) from the Support
Site.
Note
Download the setup files directly from the Support Site and do not transfer it by email. If you
transfer the setup files by email, it may become corrupted.
transfer the setup files by email, it may become corrupted.
Step 2
Copy the setup file to the Windows computer where you want to install the agent and unpack the file.
The agent requires 3 MB free on the hard drive for installation. Cisco recommends you allocate 4 GB on
the hard drive for the agent local database.
the hard drive for the agent local database.