WatchGuard Terminal Services Agent runs on Windows terminal servers and reports which user owns which session to a WatchGuard Firebox. This lets the firewall apply per-user policies for multi-user terminal environments. It is part of the Firebox single sign-on software set and is downloaded from the WatchGuard software portal.