Configuring A Patch Assessment Custom Rule (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

Related
Documentation

Configuring a Patch Assessment Custom Rule (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
Table 51: Custom Rules Configuration Details (continued)
Rule
MAC Address Rule
Machine Certificate Rule
Configuring New Client-Side Policies (NSM Procedure) on page 157
Remediating Infranet Controller Host Checker Policies on page 174
For Windows clients, you can use the system management server (SMS) remediation
feature to provide automatic updates to noncompliant software. By using a patch
assessment custom rule, you can force the client to initiate the software update
immediately after the patch assessment check.
To configure a patch assessment custom rule:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure a patch assessment custom rule.
Chapter 15: Configuring Host Checker Policies
Usage Your Action
(Windows only)—Checks 1.
the MAC addresses of the
2. Select the Required option to
client machine before the
user can access the
Infranet Controller.
3. Enter a comma-delimited list
4. Click OK.
(Windows only)— Checks 1.
that the client machine is
2. From the Select Issuer Certificate
permitted access by
validating the machine
certificate stored on the
client machine.
3. Enter Certificate field and
4. Click OK.
Enter the rule name.
require that a MAC address of the
client machine matches or does
not match any of the addresses
you specify.
(without spaces) of MAC
addresses in the form
XX:XX:XX:XX:XX:XX where the X's
are hexadecimal numbers. For
example:
00:0e:1b:04:40:29.
Enter the rule name.
list, select the certificate that you
want to retrieve from the user's
machine and validate. Or, select
Any Certificate to skip the issuer
check and only validate the
machine certificate based on the
optional criteria that you specify
below.
Expected value to specify any
additional criteria that Host
Checker should use when verifying
the machine certificate.
165