Specifying Customized Requirements Using Custom Rules (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

Specifying Customized Requirements Using Custom Rules (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
If the predefined client-side policies and rules that come with the Infranet Controller do
not meet your needs, you can create custom rules within a Host Checker policy to define
requirements that your users' computers must meet.
NOTE: You can only check for registry keys, third-party DLLs, NeTBIOS names,
MAC addresses, and machine certificates on Windows computers.
To create a client-side Host Checker policy:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller device for
2.
which you want to create a client-side Host Checker policy.
Click the Configuration tab. In the configuration tree, select Authentication > Endpoint
3.
Security > Host Checker.
Create a new policy or click an existing policy in the Policies area of the page.
4.
Click the tab that corresponds to the operating system for which you want to specify
5.
Host Checker options—Windows, Mac, Linux or Solaris. In the same policy, you can
specify different Host Checker requirements for each operating system.
Under Rule Settings, click Add. The Add Custom Rule page appears.
6.
Add or modify settings as shown in Table 51 on page 161.
7.
Click one:
8.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 51: Custom Rules Configuration Details
Rule
Remote IMV Rule
Chapter 15: Configuring Host Checker Policies
Usage Your Action
Configures integrity 1.
measurement software
2. Select the IMV option.
that a client must run to
verify a particular aspect
3. Click OK.
of the client's integrity,
such as the client's
operating system, patch
level, or virus protection.
Enter the rule name.
161