How to determine if RSA Access Manager IIS agent is deployed as an ISAPI filter or a MODULE?
3 years ago
Originally Published: 2013-11-21
Article Number
000050584
Applies To
RSA Access Manager 5.0 Agent for IIS 7.x
Issue
How to determine if RSA Access Manager IIS agent is deployed as an ISAPI filter or a MODULE?
The RSA Access Manager Agent for IIS can be deployed as either an ISAPI filter or as a Module.  These are essentially different agents, although they share some common code they use many different methods.   The agent log file does not clearly indicate which version of the agent is used.
Cause
The module uses the library ct_iis70_agent.dll, where the ISAPI filter uses the library ct_isapi_agent.dll.  Note that there are both 32 bit and 64 bit versions of each.
Resolution
Inspect the IIS console, the agent will either be listed under modules, or under filters.  
In the debug log file the <config> section with the copyright information does not tell you if a module or filter is being used, but in the <info> level logged at debug log level if the ISAPI filter is being used the text [httpFilterProc] will be displayed. 
As an ISAPI filter
2013-11-21 11:11:49 -0800 - [3956] - <Info> - [HttpFilterProc] RSA Access Manager Agent 5.0 for IIS 7.0 initialized
As a Module
2013-11-21 12:47:18 -0800 - [1956] - <Info> - RSA Access Manager Agent 4.9 for IIS 7 initialized

Related Articles

Trending Articles

Don't see what you're looking for?