Install the WatchGuard SSO Exchange Monitor

The WatchGuard SSO Exchange Monitor is an optional component of the WatchGuard SSO solution that you can install for users who do not have the SSO Client and who use computers with Mac OS X or mobile devices that run iOS, Android, or Windows mobile. The SSO Exchange Monitor enables the SSO Agent to get user logon and logoff information for those users.

To use the Exchange Monitor, you must install it on the same server where your Microsoft Exchange server is installed. The Exchange Monitor can then review the IIS service logs on your Exchange server to get logon and logoff information for your users. When the SSO Agent contacts the Exchange Monitor to find out if a user who wants to authenticate has a current session, the Exchange Monitor sends the logon and logoff information for the user to the SSO Agent. The SSO Agent can then allow or deny the user a connection to the XTM device.

System Requirements

On the computer where you install the Exchange Monitor:

Download the SSO Exchange Monitor Software

There are two installer file options for the SSO Exchange Monitor. Make sure to select the correct installer file for your server environment:

To download an installer file:

  1. Open a web browser and go to
  2. Log in with your WatchGuard account user name and password.
    The WatchGuard Portal appears with your portal Home page selected.
  3. Select the Articles & Software tab.
    The Articles & Software page appears.
  4. In the Search text box, type the name of the software you want to install or the model of your XTM device.
  5. Clear the Article check box and make sure the Software Downloads check box is selected.
  6. Click Go.
    The Search Results page appears with a list of the available WatchGuard device models.
  7. Select your XTM device model.
    The Software Downloads page for the device you selected appears.
  8. Download the correct WatchGuard Exchange Monitor installer file and save the file to a convenient location.

Install the SSO Exchange Monitor

On the server where your Microsoft Exchange server is installed:

  1. Double-click SSOExchangeMonitor_x64.exe or SSOExchangeMonitor_x86.exe to start the installer.
    To run the installer on some operating systems, you might need to type a local administrator password, or right-click and select Run as administrator.
  2. To install the software, follow the instructions on each page of the installation wizard and complete the wizard.
  3. On the Domain User Credentials page, type the domain user credentials to use for the Exchange Monitor.
    In the Domain User Name text box, make sure to type the user name in the format: domain\username. Do not include .com or .net with the domain name.

For example, if your domain is and you use the domain account ssoagent, type example\ssoagent.
You can also use the UPN form of the user name: [email protected]. If you use the UPN form of the user name, you must include .com or .net with the domain name.

  1. Click Finish to close the wizard.

When the wizard completes, the WatchGuard Authentication Gateway service starts automatically. Each time the computer starts, the service starts automatically.

After you complete the Authentication Gateway installation, you must configure the domain settings for the SSO Agent and Exchange Monitor. For more information, see Configure the SSO Agent.

See Also

About Single Sign-On (SSO)

Install the WatchGuard Single Sign-On (SSO) Agent

Install the WatchGuard Single Sign-On (SSO) Client

Enable Single Sign-On (SSO)

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Knowledge Base