000014864 - How to determine if RSA Access Manager IIS agent is deployed as an ISAPI filter or a MODULE?

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000014864
Applies ToRSA Access Manager 5.0 Agent for IIS 7.x
IssueHow to determine if RSA Access Manager IIS agent is deployed as an ISAPI filter or a MODULE?
The RSA Access Manager Agent for IIS can be deployed as either an ISAPI filter or as a Module.  These are essentially different agents, although they share some common code they use many different methods.   The agent log file does not clearly indicate which version of the agent is used.
CauseThe module uses the library ct_iis70_agent.dll, where the ISAPI filter uses the library ct_isapi_agent.dll.  Note that there are both 32 bit and 64 bit versions of each.
ResolutionInspect the IIS console, the agent will either be listed under modules, or under filters.  
In the debug log file the <config> section with the copyright information does not tell you if a module or filter is being used, but in the <info> level logged at debug log level if the ISAPI filter is being used the text [httpFilterProc] will be displayed. 
As an ISAPI filter
2013-11-21 11:11:49 -0800 - [3956] - <Info> - [HttpFilterProc] RSA Access Manager Agent 5.0 for IIS 7.0 initialized
As a Module
2013-11-21 12:47:18 -0800 - [1956] - <Info> - RSA Access Manager Agent 4.9 for IIS 7 initialized
Legacy Article IDa63103

Attachments

    Outcomes