Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 184

NSM Infranet Controller Configuration Guide
166
Click the Configuration tab. In the configuration tree, select Authentication > Endpoint
3.
Security > Host Checker.
Under Policies, select an existing policy or click the Add button to create a policy.
4.
Under Platforms, select Windows.
5.
Select the Settings tab, and then select Patch Assessment Rules.
6.
Click Add. The New Custom: Patch Assessment page appears.
7.
Enter a name for the integrity measurement rule.
8.
Select either Scan for specific products or Scan for specific patches.
9.
Select either Scan for specific products > All products or Scan for specific products
10.
> Specific products. The Host Checker checks for all of the exposed patches on the
endpoint.
If you select All Products, then the Host Checker scans for all of the exposed
a.
patches on the endpoint.
Click the Ignore these patches button to select specific patches that you wish
to ignore for all products. Then click the Add button.
Click the OK button to save information on specific patches that you wish to
ignore.
For Microsoft products, clear the check boxes to determine the severity level of
the patches that you wish to ignore. For example, if you wanted to check for only
critical patches for the selections, clear the check boxes for Severity Important,
Severity Moderate, Severity Low, and Severity Unspecified.
If you select Specific Products, then the Host Checker scans for specific product
b.
versions and ignores specific patches of those products.
Select software products from the Non-members area and add then to the
Members area.
Click the Ignore these products button to ignore specific patches pertaining to
products.
From the Non-members area, select the patches you wish to ignore, and click
the Add button to move it to the Members area
Click the OK button to save information on specific patches that you wish to
ignore.
Select Scan for specific patches to scan for specific patches from the list of available
11.
patches.
Select patches from the Non-members area and click Add to move the patches to
the Members area.
Select Enable SMS patch update to direct the Infranet Controller to notify the SMS
12.
server to update the client in the event of a failed patch assessment rule. SMS
Copyright © 2010, Juniper Networks, Inc.