Solution:
If you are running SF User Agent on the Active Directory server directly, you must ensure the locales are enforced for all users (including system user) or it will not pick up the local settings. User Agent runs as a System service and in Windows, locales and date format may differ for each User and for the whole system (system accounts)
If you are running SF User Agent on a different machine, please also change the date format on the box you are running UserAgent on. In this scenario also you must ensure that user and whole system accounts has this settings enforced. In windows 7, you must click a button to enforce locale settings to system as well for it to take effect.
On Windows 7, once you change the format date, navigate to "Administrative" tab, click "Copy settings", and ensure both checkbox are included:
"Welcome screen and system accounts" <= very important, system accounts must all have the date settings copied
"New user accounts" <= just in case
Once this is done, restart the sourcefire user agent service and it should start reporting the date in the correct format.
