Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 261 / 340

Table 67: Configuring Host Checker Customized Requirements Using
Custom Rules Details
(continued)
Your Action Function Option
Settings tab
1. Enter the rule name.
2. Enter the filename such as:
c:\temp\bad-file.txt or /temp/bad-file.txt .
3. Select the Required option to specify that
these ports are open or closed.
4. Enter the minimum version of the file
(optional). For example, if you require
notepad.exe to be present on the client, you
can enter
5.0 in the box. Host Checker
accepts version 5.0 and later, of
notepad.exe.
5. Enter the maximum age of files in the File
modified less than (days ago) box.
6. Enter the MD5 checksums value of each
executable file to which you want the policy
to apply (optional).
7. Select the Monitor this rule for change in
result check box to continuously monitor
the policy compliance of endpoints.
8. Click OK .
Use this rule type to ensure that
certain files are present or not
present on the client machine
before the user can access the
Secure Access device . You may
also use file checks to evaluate
the age and content (through
MD5 checksums) of required files
and allow or deny access
accordingly. File Rules
1. Enter the rule name.
2. Select the registry root key from the
drop-down list.
3. Enter the path to the application folder for
the registry subkey.
4. Enter the name of the key’s value.
5. Select the key value’s type (String, Binary,
or DWORD) from the drop-down list
(optional).
6. Enter the registry value.
7. Select the Set Registry value specified in
the criteria check box.
8. Select the Monitor this rule for change in
result check box to continuously monitor
the policy compliance of endpoints.
9. Click OK .
(Windows only)—Use this rule
type to control the corporate PC
images, system configurations,
and software settings that a client
must have to access the Secure
Access device. This rule type
ensures that certain registry keys
are set on the client machine
before the user can access the
Secure Access device. You may
also use registry checks to
evaluate the age of required files
and allow or deny access
accordingly. Registry
Rules
243 Copyright © 2010, Juniper Networks, Inc.
Chapter 15: Configuring Secure Access Host Checker Policies