Skip to main content
ipns
New Member
Mar 17, 2017 9:14 AM UTC
Solved

FSSO issue: multiple users on one server

We user FSSO to authenticate users for web traffic. We don't use explicit proxy because of office365 performance.

When there are multiple users on one server, user traffic from a user will be identified as traffic from another user on the same server. This is not what we want. Did anyone run into the same problem and is there a solution?

 

We use FSSO with a Collector Agent on one of our DC's and agents on the other DC servers.

 

xsilver_FTNT
Staff
Mar 20, 2017 10:51 AM UTC

Hi,

 

solution is called Terminal Server Agent. DCAgent collects data from DC, and still does expect one user per workstation, which also mean 1-user = 1-IP. Where terminal server mean N-users per 1-IP .. the TSAgent adds port alocation port range into FSSO chain.

 

Best regards,

Tomas

3 replies

xsilver_FTNT
Staff
Staff
Mar 20, 2017 10:51 AM UTC

Hi,

 

solution is called Terminal Server Agent. DCAgent collects data from DC, and still does expect one user per workstation, which also mean 1-user = 1-IP. Where terminal server mean N-users per 1-IP .. the TSAgent adds port alocation port range into FSSO chain.

 

Best regards,

Tomas

ipns
ipnsAuthor
New Member
Mar 22, 2017 8:21 AM UTC

Thanks Tomas,

 

In the documentation I found about the TSagent only Citrix is mentioned. Can this agent also be installed on management servers which receive multiple RDP sessions?

 

Kind Regards,

Maarten

xsilver_FTNT
Staff
Staff
Mar 22, 2017 9:45 AM UTC

If it's server OS and not the workstation (which is supposed to be single user at a time), then it's OK.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT