Install an instance of Filtering Service

When the standalone or primary Policy Broker and the central Policy Server reside on the management server, you must install at least one instance of Filtering Service that connects to the central Policy Server.

This instance of Filtering Service may reside:

• On a supported Linux server
• On a supported Windows server
• On a filtering only appliance

Note that using a software installation for this instance of Filtering Service may make for a more convenient deployment. A software deployment allows you to also install components like User Service and Usage Monitor for the central Policy Server. (These components don’t reside on a filtering only appliance.)

Best practice is to install Filtering Service on a different machine from the management server. This is because Filtering Service can consume considerable system resources and may have a performance impact on the server.

Although other components (like Network Agent or a transparent identification agent) may be installed with Filtering Service, a second instance of Policy Server may not reside on this machine. This Filtering Service instance must connect to the central Policy Server on the management server machine.