Deploying the USS Agent for Windows

What's new ?

Service IP addresses and ports

Understanding Product Usage

End of Life

Supported Browsers

Account Security Guidelines

How To Activate Your USS Account.

Dashboard Walk Through.

Getting Started with Web Security

Getting started with Cloud Application Security.

Getting started with Email Security

Getting started with Security Awareness Training

Getting Started with Posture Management.

Getting Started with Compliant Email Archive (CEA)

WS - Rules Engine Concepts

WS - Filter Rules

Feature Control Rules

Browser Categories

Custom URLs

Bypass Categories

Deployment Section.

Agent Configuration Profiles

Unblock Requests

Web Security: Product Configuration

Prevent Law features for UK organisations

Download Microsoft Windows agent

WS - Windows Agent Deployment Methods

Deploying via Wizard

Deploying via Startup/Shutdown script

Deploying the Windows agent via a custom MSI

Deployment via GPO

Deploying USS Windows Agent via Microsoft Intune

Command-line parameters for the USS Agent for Windows.

Installing the USS Agent for Windows SSL certificate in Firefox.

Deploying the USS agent for Windows via Microsoft SCCM

Requirements for the USS Agent for Windows

Changelog - Windows Agent

Configuration options for the Windows agent type

Processes used by USS Agent for Windows

Download macOS Agent

WS - Mac Agent Deployment Methods

Install - Deploying the USS Agent for Mac OS X via Wizard.

Command-line parameters For the USS Agent for Mac OS X

How to deploy the SSL Certificate to a macOS device.

WS - Deploying USS Mac Agent via Microsoft Intune

Deploying the USS Agent for Mac OS X via JAMF

Requirements for the USS macOS agent

Changelog - MacOS Agent

Configuration options for the macOS USS agent.

Deploying Chromebook agent via Google Admin console

Requirements

Changelog - Chromebook Agent

Download Chromebook agent

Configuration options for the USS Chromebook agent.

Deploy the Hosted Gateway Cert for iOS devices via inTune.

WS - USS Mobile App Deployment via Intune for Android — Personal / BYOD Deployment

USS Mobile app deployment via Intune for Personal / BYOD Deployment (Unsupervised)

Deploying the USS Mobile Agent via Intune (Fully Managed / Supervised Device)

WS - Mobile Gateway Apps

USS Gateway Changelog

USS Gateway Downloads

USS Gateway Requirements

USS Gateway Installation

USS Gateway Getting Started Guide

Installing the USS Gateway on Microsoft Hyper-V

Deploying Web Browser proxy settings for the USS Gateway.

Migrating the SSL intercept certificate to a new gateway

Preparing the USS Gateway for use with a load balancer

Client Deployment options for explicit proxying to the USS Gateway.

Configuring USS Gateway to work with LoadBalancer.org software load balancer

Set up Guide for Edge Nexus ADC and Censornet USS Gateways

Third Party Load Balancer Guides

Change the default listening port for the USS Gateway proxy

Installing an SSL Certificate on iOS 13 onwards.

Overview

Authentication & Identification

Network

USS Gateway Time & NTP Settings

USS Gateway System Settings

USS Gateway Advanced configuration

USS Gateway Captive and Guest Portal Modes

Configuration options for the USS Gateway agent.

USS Gateway Charts

USS macOS Agent Log File Storage

Collecting debug information - USS Agent for macOS

Processes used by the USS Agent for Mac OS X

USS Agent for macOS Tray icon status codes.

Microsoft Teams Bypass Exception list on mac OS

Safari 17 Proxy Exceptions limit on a USS Mac OS X Agent.

How to disable Device Guard or Credential Guard

USS Window Agent Tray icon status codes

Temporary files generated by the endpoint agent software

USS Windows Agent Log File Storage

Incompatibility with nmap based products such as Wireshark

Collecting debug information - USS Agent for Windows

Using USS Windows Agent Web Security with Sophos

Windows agent - force download of anti-malware database

Change the default USS Windows agent configuration poll time.

Regular Gateway server maintenance

Accessing the USS Gateway Command Line

Resetting the Ubuntu Password To Log Into Gateway Command Line

Captive Portal on Samsung Devices

"The Requested Content Was Blocked" Error Message on a USS Gateway

Interception of iOS and Android apps (SSL Pinning)

Using an intermediate CA signed by Windows DC root CA

Updating the USS Gateway

Upgrading the USS Gateway from 20.04 LTS to 22.04 LTS.

Importing an SSL Certificate into the USS Gateway

Collecting debug information - USS Gateway

Adding a Static Route on a USS Gateway.

Chromebook Allowlist USS Gateway Proxy

Disable QUIC in Chrome Browser

Take a Packet Capture From the USS Gateway Command Line.

Check for the presence of a system proxy user

USS Gateway failing to install

ERR_CERT_HAS_EXPIRED_ Digicert certificate expiry 2023

How to add a Static Route to the USS Gateway

CVE-2020-15778

YouTube Safe or Restricted mode enforced by DNS on a USS Gateway.

How to renew Certificates on the USS Gateway

Troubleshooting Web Security Filter Rules.

WS - Test URLs

How to capture a HAR file

Discovering Stale Agents via API

Web Security - Filter Rule Simulation

How to identify if a Bypass is affecting Web Security Filter Rules.

Performing a URL Lookup

How to use the Gateway Portal - iOS

Bypassing Office 365

Unclassified / Uncategorised Site Processing

TrustLayer Web Filtering Policy and Approach for Education

List of domains to bypass apps for SSL Interception on the USS Gateway.

Blocking Embedded Games in Google Search

MIME Categories and Types

How to submit a URL reclassification request

What happens when my Web Security license is suspended or deleted?

SSL/TLS Strict Mode blocked ciphers

Export Agents using curl script

Custom JSON links for Agent Profiles

Custom URL parsing and overlapping patterns

Web Categories List

Global Web Filtering Coverage

Fair Usage Policy for Web & CASB (Inline)

Web Security: Best Practice Guide

Managing Sanctioned Apps

Events not arriving for Office 365 Onedrive or Sharepoint

Overview

App Catalog

API Integrations

App Catalog List

EMS - Message Rules

Connection Rules

Custom rule Data

Global Quarantine

Personal Quarantine

Spam Deny List

Spam Safe List

Mailboxes

Group Management

EMS - Product Configuration

How to avoid multiple disclaimers being added when forwarding or replying to emails

Executive Tracking

Nearby Domain Rule

Configuring TLS encryption

LinkScan: on-demand URL protection

Configure outbound DMARC

Configure outbound DKIM

How to Prefix a banner to inbound emails

Identify Safe Listed emails in Email Activity

Executive Tracking with Subject

IP Geolocation Connection Rule

Display Name Detection

How to configure Authenticated Received Chain (ARC) Inbound

Configure Conversation Activity

How to use the Domain Name Detection rule

Empty Body Detection

How does DMARC work?

Reject oversized emails

MX records and IP addresses for all regions

MX records and IP addresses for EU customers

MX records and IP addresses for USA customers

Post Delivery Email Deletion (Retract)

Configure Office 365 for EMS

Safelisting Email Security IP addresses in Office 365

Configure Inbound mail on Office 365 to reject non-EMS emails.

Managing DNS in Office 365

Digest generation and Quarantines

Blocking emails from hacked Gmail accounts

Stop specific users from receiving Word documents

Detect credit card numbers in an email

Disable spam filtering for specific mailboxes

CoreService2 Anti-Spam Classifications

CoreService filter classifications

Configure GMail using Google Workspace for EMS

Configure outbound email for Exchange 2007/2010

Configure outbound email for Exchange 2016

Bulk Email & Fair Usage

Queue retention and retry times

Personal Safe Lists and Personal Deny Lists

Reject message due to message “550 5.1.8 sender denied”

Email Sandbox - Supported file types

[Marketing Medium] or [High Medium] prefixed to the subject of mails

DMARC Failure Reporting

What happens when my Email Security license is suspended or deleted?

Example Spam Digest or Quarantine Report

How to onboard users into the End User Portal

Cisco Fixup Protocol

Adding images to email disclaimers

Reject Top Level Domains

Adding an alias to a primary mailbox

Temporary Server Error

Unable to Relay error on outbound email

Notify Recipient/Sender Actions

Reject Disabled user accounts (mailboxes)

DLP Dictionaries

Activate the Quarantine Portal for Spam Digest users

DMARC Abuse Report received even though it passes DMARC

Unable to forward emails from Microsoft 365 accounts

How to use Custom Rule Data (formerly Dictionaries)

HTML attachments

How to block double extension filenames

Manage Mailboxes using the API

Email Security: Best Practice Guide

How to work with System Locked rules

How to detect simplified Chinese character sets

Placeholders for inserting message data into actions

Creating Custom Digests

Advanced Email Sandbox - Overview

Redirect emails to a different address

Connector Mode Setup

How to add comments in Regex

Configuring MTA-STS and TLS-RPT (Inbound)

QR Code scanning

How to Report Spam and Phishing Emails via the Censornet Outlook Plugin.

Outlook Add-in V2

Installing the Outlook add-in for Email Security

Outlook add-in is not the newest version

Upgrade Outlook Add-in for reporting spam and phishing email

SecureMail concepts explained

Configuring SecureMail

Using the SecureMail dashboard

Reporting spam or false positives

Insufficient system resources message on inbound email delivery

Outbound Delivery error: 550 Unable to relay

No Valid MX Record NDR message

Why do I see No SMTP transport in Email activity?

Bypass Email Security for Forwarded Addresses on Exchange Online

Empty Subject Detection

Email Security: Quick Start for Microsoft 365.

Email Security: Quick Start for Connector Mode with Microsoft 365.

Email Security: Quick Start

Email Security: Quick Start for Google Workspace

EMS - Default Rules

Message Scripting for Connector Mode

CEA - Updating Company Information

CEA - Configuring Outbound Email Settings and Email Alerts

CEA - Setting Retention Period

CEA - Setting Search Date Limit

CEA - Configuring Advance Company Settings

CEA User Guide

Viewing and Managing History in CEA

Using the CEA Outlook Add-in

How to access the CEA as a User

Viewing and Managing Spaces in CEA

Managing Deletion Requests from CEA

Installing the Outlook Add-in for CEA

Legal Hold in CEA

Authorised Delete in CEA

Viewing and Managing CEA results

Configuring Google Workspace OAuth and Service Account

Integrate Gmail with a CEA

CEA - Uploading Email Archives to CEA via AWS S3

CEA - Data storage explained

Compliant Email Archive Quick Start Guide

How to calculate incoming and outgoing emails for mailboxes on Exchange on Prem.

Understanding Data Guardians

Configuring journaling on Exchange 365

Configuring authentication with O365 via OAuth

Ingest mail via Mailbox Reader with MSGraph

Configuring an Impersonation Account

CEA - Forward to Inbox feature.

Assigning delegation via OAuth with User Directory

Compliant Email Archive - LDAP Configuration

Configuring journaling for Exchange and Office 365

CEA - Configuring a local user account

Re-enabling Outlook Homepage Tab

Ingest mail via Mailbox Reader for Exchange 2013 - 2019

End User Email Archive Authentication with ADFS

Log Streaming Overview

Log Streaming to Microsoft Sentinel

Log Streaming record format

Log Streaming to Rapid7 InsightIDR

Log Streaming to Amazon S3

Log Streaming to Google Cloud Storage

Log Streaming for Splunk Enterprise or Cloud

Log Streaming to Sumo Logic

SAT - Dashboard - Dashboard Overview

SAT - Dashboard - Your Courses

SAT - Dashboard - Activity Timeline

SAT - User Search

SAT - Dashboard - Most Clicked Simulations

SAT - User Guide

SAT - Using the Sim Creation Tool

SAT - Journey Builder

SAT - Collections

SAT - Content Packs

SAT - Custom Landing Page

SAT - Email Customisation

SAT - Hierarchical Tenancy Management.

SAT - Multi-factor authentication for Email

SAT - Phish Report Integration with Microsoft Defender.

SAT - Custom Email Domain

Allow SAT Domains for EMS customers

SAT - M365 Masked URL Update 06/2026

SAT - Create a Mail Flow Connector for SAT Delivery to Office 365.

SAT - Comms Template for Microsoft.

SAT - Comms Template for Google.

Course Overviews

Cyber Hints and Tips

How do I reset my SAT password?

SAT - Reports data not showing.

How to allow download of images within emails

SAT Course video do not load.

Display simulation images within Outlook using PowerShell.

SAT - Logs

Individual User History

How do I Access the SAT Portal as a New User via Email?

Change Log - SAT

Posture Management Overview

Posture Management Dashboard (Homepage)

Connectors

Posture Management Scanning

Download Posture Management Report Data.

Posture Management Activity and AI Remediation

Alerts

Controls Management

AWS Onboarding Guide

Google Cloud Platform Onboarding Guide

Microsoft 365 Onboarding Guide

Microsoft Azure Onboarding Guide

Salesforce Onboarding Guide

Configuring Microsoft Teams alerts

Upgrade Notice

USS Connector Onboarding Guide

Multiple Microsoft 365 Connectors

Posture Management AI

Managing an MFA lock-out

Disabling SMS as a second factor for 2FA

Count how many users are in an AD group

ADFS Login not being intercepted for MFA

Configure FortiGate to use PAP for Challenge-Response

Overview

Quick Start

MFA - Rules Engine Concepts

Authentication Client (server)

Authentication App (enduser)

MFA - Product Configuration

Third Party Guides

Configuring Windows Logon Protection

Configuring RADIUS Protection

Deploying the Cloud MFA Authentication App

Configuring RD Web Access using IIS Website Protection

Products not supporting RADIUS Challenge-Response

Configuring AD FS Protection

Activity Reports

Data retention periods

Charts

Schedules

Admin Auditing

Identifying Spoofed Emails

DMARC Fail: Alignment reporting

USS Agent failing to register with a USS Tenant

Allow partial websites/specific YouTube videos

Gateway failing to join the domain - the address handle that was given to the transport was invalid

Feature Control Safe Search blocking content.

Gateway proxy authentication pop-up login dialog

Bypasses not applying

USS Gateway IP changes unexpectedly

What information is needed to log a support ticket.

TrustLayer Support Bot

How to Provision a Tenant

Settings

Licenses

Notifications

Branding

Configuring Microsoft Azure as an Identity Provider

Introduction

Master Services Agreement (MSA)

Standard Contractual Clauses (SCCs)

Website Usage and Cookie Policies

Terms for Support Services (SLA).

Administrators

Single Sign On

Active Directory and Entra ID

AD Connect software

Roles (RBAC)

Keyword Lists

Devices & Groups

Active Directory Synchronisation Explained

Active Directory Object Synchronisation

Account Password and MFA

Role Builder

Granting access to synchronise Entra ID shared mailboxes

Add the Exchange Online API permission to an existing AAD connection

Verify that Azure AD permissions are granted for Shared Mailbox sync

Google Workspace synchronisation

All Categories > Web Security (WS) > USS Agents > USS Agent for Windows > Deploying the USS Agent for Windows

10 articles

Download Microsoft Windows agent

4.4.4.8240 - Stable Release. The latest fully tested, production-ready build available for manual download. This is not the same version pushed through the Automatic Update Repository's Stable channe…

Updated 5 hours ago by admin

WS - Windows Agent Deployment Methods

The Windows Agent can be deployed in several ways; please see the table below for options that are available. Deployment Method Knowledge Base Article Manual Deployment Knowledge Base Article link De…

Updated 2 weeks ago by admin

Deploying via Wizard

The USS Agent for Windows software includes an interactive installation wizard, which is run when the.msi file is started by a Windows user. For small deployments, this is often the quickest and easi…

Updated 1 year ago

Deploying via Startup/Shutdown script

To achieve an unattended install and uninstall of USS Agent , you can use the Startup/Shutdown Script functionality of Windows domain controllers. For simplicity, this article will show you how to ed…

Updated 2 years ago

Deploying the Windows agent via a custom MSI

Video Guide. The Video below will guide you through creating a Transform file using the Orca Tool.. Step by Step guide. Download this version of Orca. The version of ORCA you use must be the one abov…

Updated 11 months ago

Deployment via GPO

These instructions are specific to Windows Server 2008r2 , however the steps should be similar for later versions as well. Please contact your server administrator for further assistance. Create a tr…

Updated 2 years ago

Deploying USS Windows Agent via Microsoft Intune

This is a customer contributed article. Prerequisites: Familiarise yourself with Microsoft Intune Standalone - Microsoft KB. Download the Microsoft Win32 Content Prep Tool - Version 1.8.6. Download t…

Updated 11 months ago by admin

Command-line parameters for the USS Agent for Windows.

The USS Agent for Windows software supports command-line parameters which can be used as part of scripts to install or control the agent after installation. Pre-installation Command Line Parameters.…

Updated 2 years ago

Installing the USS Agent for Windows SSL certificate in Firefox.

USS Agent for Windows performs SSL Interception to filter and control secure HTTPS web sites. For Edge, Internet Explorer and Chrome, the certificate is automatically installed during the agent insta…

Updated 2 years ago