ZyXEL Communications UAG Series Cli Reference Manual page 196

Chapter 31 Endpoint Security
Table 111 Endpoint Security Object Commands
COMMAND
windows-version {windows-
2000 | windows-xp |
windows-2003 | windows-
2008 | windows-vista |
windows-7 | windows-
2008r2}
matching-criteria {any |
all}
list signature {anti-
virus | personal-firewall
| status}
[no] windows-auto-update
{enable | disable |
ignore}
[no] windows-service-pack
<1..10>
[no] windows-security-
patch security_patch
[no] windows-registry
registry_key {eq | gt | lt
| ge | le | neq}
registry_value
show eps profile
[profile_name]
show eps profile profile_name
signature {anti-virus |
personal-firewall}
show eps signature {anti-virus
| personal-firewall | status}
[no] eps rename profile_name
new_profile_name
196
DESCRIPTION
If you set windows as the operating system (using the os-type command), use this
command to set the version of Windows.
Select whether the user's computer has to match just one of the endpoint security
object's checking criteria or all of them.
Displays all the anti-virus software packages, personal firewall software packages or
EPS signature information respectively.
The status command displays the EPS signature version, release date and the total
number of software packages for which the UAG's endpoint security can check.
If you set windows as the operating system (using the os-type command), you can
use enable with this command if the user's computer must have the Windows Auto
Update feature installed and activated; use disable if the Windows Auto Update
feature must be installed but deactivated; use ignore if the Windows Auto Update
feature must be installed but does not matter if it is activated or not.
The no command does not check the Windows Auto Update feature.
If you set windows as the operating system (using the os-type command), you can
enter the minimum Windows service pack number the user's computer must have
installed. The user's computer must have this service pack or higher. For example, "2"
means service pack 2. The no command means to have the UAG ignore the Windows
service pack number.
If you set windows as the operating system (using the os-type command), you can
use this command to set a Windows security patch that the user's computer must
have installed. If you want to enter multiple security patches, use this command for
each of them.
The user's computer must have all of the set Windows security patches installed to
pass the checking item.
If you set windows as the operating system (using the os-type command), you can
use this command to set a Windows registry value to check on the user's computer. If
you want to enter multiple registry values, use this command for each of them.
Set whether the value for the registry item in the user's computer has to be equal to
(eq), greater than (gt), less than (lt), greater than or equal to (ge), less than or
equal to (le), or not equal to (neq) the value specified.
The user's computer must pass all of the set Windows registry value checks to pass
the checking item.
Displays the settings of all or the specified endpoint security object.
Displays Anti-Virus or personal firewall signatures that have been added to the
specified endpoint security object.
Displays all the anti-virus software packages, personal firewall software packages or
EPS signature information respectively.
The status command displays the EPS signature version, release date and the total
number of software packages for which the UAG's endpoint security can check.
Changes an endpoint security object name.
UAG CLI Reference Guide