Surfcontrol EUM issue

There is a post "Surfcontrol EUM issue" in another site, which I have the answer to but can't reply - so here it is in case you do a Google search on this;

--- The question on that site ---
The problem is this:
1. Windows user logs onto our domain.
2. The EUM logon agent sends their domain\username and IP information to WebFilter.
3. User shuts down and leaves office.
4. MAC user boots up some time later and is DHCP'd the same IP (as the lease has since expired) 5. WebFilter incorrectly tracks/reports the browsing activities of the MAC user against the cached domain\username of the Windows user!!!

Right now, we don't have a solution for the MAC situation however, for the momentI'd be more than happy if MAC activity was simply tracked by IP - but certainly not in the name of the previous Windows holder of the IP addresses.

It seems to me that we need a way to regularly flush the EUM information that Webfilter stores.

Please advise, as this problem completely voids the integrity of the data reported.

-- The solution ---

There is a EUM agent that runs through logon scripts. It it ScEumLoginAgent.exe. What you do is launch that on your clients with the /intlogoff option which will remove that user's mapping to the IP address.

You can also run a logout script ScEumLoginAgent.exe /logout which will do the same thing, though Windows logout scripts are flaky at best.

I'm using the first method.