The eDirectory root context is defined incorrectly

The root context set in the wsedir.ini file is different from the one set for eDirectory Agent in the Forcepoint Security Manager. In this case, although the user can be identified, your web protection software may not be able to apply the correct policy.

The user’s requests may be handled by a computer or network policy (if applicable), or by the Default policy.

If these root context values are different, a user can log on to two different trees or branches in Novell eDirectory server, and still be identified by eDirectory Agent. However, when Filtering Service determines the policy for this user, it uses the root context specified in the Forcepoint Security Manager to retrieve information. Filtering Service cannot determine the appropriate policy for a user logging into a Novell eDirectory tree or branch outside the specified root context.

Ensure that you are using the same user and the same root context in both the INI file and the Security Manager.