Cisco 5520 - ASA IPS Edition Bundle Configuration Manual page 56

Configuring the Secure Desktop for Clients that Match Location Criteria
Always Enabled to make the feature available to the remote client that matches the location criteria.
•
If you click this radio button, CSDM dims the attributes in the Criteria area. If set, you cannot
change other settings on this tab; your configuration of a VPN policy for this feature ends at this
step.
Enabled if criteria match to make the feature available to the remote client that matches the
•
location criteria and satisfies the conditions set below. If you click this radio button, CSDM activates
the check boxes in the criteria area.
Note
Check Location Module if you want to require the presence of Secure Desktop or Cache Cleaner as a
Step 4
criterion for enabling the feature identified in the tab, then choose the module to require: Secure Desktop
or Cache Cleaner.
Note
Click one or more security categories to require their presence as a condition to enable the location
Step 5
module you chose in
If you enable more than one category, the end user's computer must pass in each category to pass the
System Detection check. An "AND" relationship is present among the enabled categories.
The options within each category have an "OR" relationship. For example, you can specify that any one
of a list of antivirus software programs be running, and even if you have checked all of them as possible
candidates, having just one of them running is enough to satisfy the antivirus software requirement.
The security categories are as follows:
Anti-Virus—Check to enable System Detection for the presence of antivirus software.
•
CSD requires one of the applications highlighted to be running on the remote client PC to satisfy
the anti-virus requirement.
• Anti-Spyware—Check to enable System Detection for the presence of antispyware software.
CSD requires one of the applications highlighted to be running on the remote client PC to satisfy
the anti-virus requirement.
Firewall—Check to enable System Detection for the presence of a personal firewall that is running.
•
CSD requires one of the applications highlighted to be running on the remote client PC to satisfy
the personal firewall requirement.
OS—Check to enable System Detection for the presence of a particular operating system and
•
service pack. CSD requires one of the operating systems highlighted to be running on the remote
client PC to satisfy the operating system requirement.
(Optional) Enter an integer in the range 0 - 999999 in the Must have been updated in the last ___ days
Step 6
fields.
CSDM includes this two such fields, one above the Anti-Virus window and the other above the
Anti-Spyware window.
For each enabled security category you check, click one of the options or control-click multiple options.
Step 7
Cisco Secure Desktop Configuration Guide
5-18
An "Enabled if criteria match," setting without criteria is equivalent to "Always Enabled."
If the feature you choose is not active, the client fails the VPN feature policy criteria check.
Step 4.
Chapter 5 Setting Up CSD for Microsoft Windows Clients
OL-8607-02