HP 6600 Security Configuration Manual page 424

Item
Policy Configuration
Resource
Configuration
Table 43 Configuration items
Item
Rule Name
Type
Operating
System
Version
Patch
Rule Name
Type
Operator
Browser
Version
Patch
Rule Name
Antivirus
Software
Type
Description
Set check rules for the security policy.
Check rules are divided into seven categories: operating system, browser, antivirus
software, firewall, certificate, file, and process.
To pass the check of a category, a host needs to satisfy at least one rule of the category.
To pass the check of a security policy, a host must satisfy all categories of the policy.
Click the expansion button before a category to view the rule information. Click the
Add button to add a rule for the category. For more information about rule
configuration, see Table
Specify the resources that can be accessed by user hosts that satisfy the security policy.
You can select All Web Proxies, All TCP Applications, and all IP Networks. To select
specific Web proxies, TCP applications, or IP networks, click the corresponding
expansion button.
Description
Enter a name for the operating system rule.
Specify the operating system type. A user host must run the specified type of
operating system to pass security check.
Specify the operating system version. The operating system of a user host must
satisfy the version requirement to pass security check.
Specify the operating system patches. The operating system of a user host must
have the specified patches installed to pass security check.
Enter a name for the browser rule.
Specify the browser type. A user host must use the specified type of browser to
pass security check.
Set an operator for the browser version check.
•
>=: A user host must use the specified version or a later version.
•
>: A user host must use a version later than the specified version.
•
=: A user host must use the specified version.
•
<=: A user host must use the specified version or an earlier version.
•
<: A user host must use a version earlier than the specified version.
Specify the browser version.
IMPORTANT:
An IE browser version must be a floating point number with up to two digits after
the radix point.
Specify the browser patches. The browser of a user host must have the
specified patches installed to pass security check.
Enter a name for the antivirus software rule.
Specify the antivirus software type. A user host must use the specified type of
antivirus software to pass security check.
410
43.