File System Proxy Service Installation

The File System Proxy installer is designed to simplify the process of setting up File System Scanning Proxy as a service on the designated proxy server. As a best practice, use a specifically provisioned domain account as the File System Proxy service account. To install the FileSystemAccess (FSAA) service on the targeted proxy servers:

Step 1 – Run the FileSystemProxy.exe executable. The Netwrix Access Analyzer (formerly Enterprise Auditor) File System Scanning Proxy Setup wizard opens.

Step 2 – On the Welcome page, click Next to begin the installation.

Step 3 – On the End-User License Agreement page, select the I accept the terms in the License Agreement checkbox and click Next.

Step 4 – On the Destination Folder page, click Next to install to the default folder or click Change to select a different location. Clicking Change opens the Change destination folder page.

On the Change destination folder page, choose a different destination folder for the installation.

• Look in – Select which folder or sub-folder to complete installation in using the Look in dropdown
• Up one level – Click the Up one level button to select the folder one level above the selected one
• Create a new folder – Click to create a new folder for the destination of the installation

Click OK to save changes or click Cancel to return to the Destination Folder page without saving.

Step 5 – On the Configure Service page, configure the credential to run the service using the radio buttons. Then, click Next.

• Run as LocalSystem – Uses the local system to run the File System Proxy service
• Run as a service account – Uses the provisioned credentials provided in the User Name and Password fields to run the File System Proxy service. Remember, this account must be a local Administrator on the proxy server and have the Log on as a service privilege in the proxy server's Local Security Policy.

Step 6 – On the Ready to install page, click Install to start installation.

Step 7 – When the installation completes, click Finish to exit the wizard.

note

If the File System Proxy Service is installed on multiple servers, you should also create a custom host list of proxy servers in Netwrix Access Analyzer (formerly Enterprise Auditor).

After you install the File System Proxy Service on any proxy server, configure the File System Solution certificate exchange method for Proxy Mode as a Service. See the FSAA Applet Certificate Management Overview topic for additional information.

Custom Parameters for File System Proxy Service

You can modify the port and priority parameters for the File System Proxy Service on the registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\StealthAUDITFSAA\ImagePath

• Port parameter – You only need to add this to the registry key value if you use a custom port. You don't need to set the default port of 8766 as a parameter

  • Append -e [PORT NUMBER] to the ImagePath key value

• Priority parameter – You can modify this so that the service runs as a background priority, which may be useful if you installed the service directly on a file server

  • Append -r 0 to the ImagePath key value
  note

  If you add both parameters, there is no required order.

  info

  Stop the Netwrix Access Analyzer (formerly Enterprise Auditor) FSAA Proxy Scanner service before modifying the registry key.

Configure these service parameters:

Step 1 – After installing the File System Proxy Service, open Services Management Console (services.msc). To stop the service, right-click the Netwrix Access Analyzer (formerly Enterprise Auditor) FSAA Proxy Scanner service and select Stop.

Step 2 – Open Registry Editor (regedit) and navigate to the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\StealthAUDITFSAA\ImagePath

Step 3 – Right-click the ImagePath key and select Modify. The installer set the Value data during installation according to the installation directory location you selected.

• Priority set to background priority:

  • Add -r 0 to the end of the path value

• Custom Port:

  • Add -e [PORT NUMBER] number to the end of the path value

    Example with Port number 1234:

C:\Program Files (x86)\STEALTHbits\StealthAUDIT\FSAA\StealthAUDITRPC.EXEFSAASrv.DLL -e 1234

note

You only need to add the port number to the path if you use a custom port.

Step 4 – Click OK and close Registry Editor.

Step 5 – Return to the Services Management Console and start the Netwrix Access Analyzer (formerly Enterprise Auditor) FSAA Proxy Scanner service. Close the Services Management Console.

Step 6 – In the Access Analyzer Console, navigate to the FileSystem > 0.Collection > [Job] > Configure > Queries node and open the File System Access Auditor Data Collector Wizard. On the Applet Settings wizard page, change the Port number to the custom port.

note

See the File System Data Collection Configuration for Proxy as a Service section for additional configurations required to run scans in proxy mode as a service.

Step 7 – Repeat the previous step for each of the FileSystem > 0.Collection jobs to employ this proxy service.

Access Analyzer now uses the custom port you identified for communication between the File System Proxy Service and Access Analyzer.