Resolving usernames from terminal sessions (MS RDP Farm)

[Sergo89]

Hi Folks,

do you know any way how to resolve usernames who connected through MS RDS farm (and maybe Citrix, never tried it). I need to get internet usage report for user, technically everything works, i see username, destination URL, but Checkpoint mixing all users who ever connected to this session hosts. It shows sessions for whole people who use this session host, and i dont know who is who

thanks

[PhoneBoy · Accepted solution]

You need to use the Multi-User Host agent on the terminal server.
This provides a way to differentiate between users on terminal servers.

[Sergo89]

Thanks PhoneBoy! its exactly what i need!

[Sergo89]

Sorry PhoneBoy, just one thing is not clear for me. What's Identity Server? I thought MGMT already has it, i couldnt find information how and where it should be deployed.

Thanks

[PhoneBoy]

The MUH agent is installed on the Terminal Server itself.
It installs a driver for the entire server, so it must be installed by an admin.
The version you install depends on the gateway version you use. 

[Sergo89]

I installed local agent onto my desktop (just for test), and pointed to mgmt server, but it doesnt see server. Maybe problem with versions, server is 80.40 but client R81 (i couldnt find old version) 

[PhoneBoy]

The agent you install on your desktop is different from the one you install on the Terminal Server.
For more details, see: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 
In any case, the agent should point to the gateway, not the management server.

[Sergo89]

It works thanks!