Related Topics
Install the WatchGuard Single Sign-On (SSO) Exchange Monitor
As an optional part of the WatchGuard Single Sign-On (SSO) solution, you can install the WatchGuard SSO Exchange Monitor.
For OS compatibility information and a detailed explanation of how Exchange Monitor works, see About Active Directory Single Sign-On (SSO).
Before You Install
On the computer where you install the Exchange Monitor:
- Microsoft Exchange Server must be installed. For information about which Microsoft Exchange Server versions are compatible with the Exchange Monitor, see the Operating System Compatibility list in the Fireware Release Notes. You can find the Release Notes for your version of Fireware OS on the Fireware Release Notes page of the WatchGuard website.
- Microsoft .NET Framework v3.5 must be installed if you use Exchange Monitor on a computer that runs Windows Server 2012, Windows Server 2012 R2 and higher, or Microsoft Exchange 2013 and higher
- Microsoft Exchange IIS logging must be enabled and configured for the W3C Extended log file format
- TCP port 4136 must be open
Download the SSO Exchange Monitor Software
There are two installer file options for the SSO Exchange Monitor. Make sure to select the correct installer file for your server environment:
- 64-bit servers — SSOExchangeMonitor_x64.exe
- 32-bit servers — SSOExchangeMonitor_x86.exe
To download an installer file:
- Go to the WatchGuard Software Downloads Center.
- Find the software downloads page for your Firebox.
- Download the correct WatchGuard Exchange Monitor installer file and save the file to a convenient location.
Install the SSO Exchange Monitor
On the server where your Microsoft Exchange server is installed:
- Double-click SSOExchangeMonitor_x64.exe or SSOExchangeMonitor_x86.exe to start the installer.
To run the installer on some operating systems, you might need to type a local administrator password, or right-click and select Run as administrator. - To install the software, follow the instructions on each page of the installation wizard and complete the wizard.
- On the Domain User Credentials page, type the domain user credentials to use for the Exchange Monitor.
In the Domain User Name text box, make sure to type the user name in the format: domain\username.
A domain suffix (for example, .com or .net) is optional, but WatchGuard recommends that you include it with the domain name. For example, if your domain is example.com and you use the domain account ssoagent, type example.com\ssoagent
You can also use the UPN form of the user name: [email protected]. If you use the UPN form of the user name, you must include .com or .net with the domain name. - Click Finish to close the wizard.
When the wizard completes, the WatchGuard Authentication Exchange Monitor service starts automatically. Each time the computer starts, the service starts automatically.
After you complete the Exchange Monitor installation, you must configure the domain settings for the SSO Agent and Exchange Monitor. For more information, see Configure the SSO Exchange Monitor.
See Also
About Active Directory Single Sign-On (SSO)
Install the WatchGuard Single Sign-On (SSO) Agent and Event Log Monitor
Install the WatchGuard Single Sign-On (SSO) Client
Choose Your Single Sign-On (SSO) Components
Troubleshoot Single Sign-On (SSO)