Where does Network Agent belong in the network?

Install Network Agent where it can see all Internet requests (HTTP and non-HTTP) from the machines it is assigned to monitor. This monitoring must be done inside the firewall.

Optionally, deploy multiple Network Agent instances, with each instance monitoring a different segment of the network. This may be necessary in a busy network.

The size and configuration of the network, the hardware capabilities of each Network Agent machine, and the volume and type of network traffic all play a role in determining how many Network Agent instances are needed. Some sites can use one Network Agent machine for every thousand users; others use one Network Agent machine for several thousand users. Forcepoint Technical Support and Sales Engineering can assist with deployment decisions.

Network Agent machines can connect to the network via a switch or hub.

Although Network Agent can be installed on the same machine as some integration products, it should never be installed on the same machine as the firewall.

If your network includes a router or Network Address Translation (NAT) device, position Network Agent to see the original (not the translated) IP addresses for all monitored machines.