Forum Discussion

Peter_Wang_7400's avatar
Peter_Wang_7400
Icon for Nimbostratus rankNimbostratus
Jul 19, 2011

APM client side check - Registry and Windows File

My client wants to check whether a pc is a valid company SOE based on three conditions - Domain, Antivirus and SOE image version. All three checks need to be passed.

 

 

The domain and antivirus checks use registry but there are different flavors for each. Can I combine the registry check expression like something below? I prefer not to create two registry check boxes if possible.

 

 

 

("\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"."Domain"=[a.abc.com,b.abc.com]) AND ("\HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion"."Parent"=[server1,server2]

 

 

Also for windows file check, which directory does APM look for on the client pc? And the file version varies from 3.3 to 5.1.2.

 

 

Thanks.

 

Peter

 

BIG-IP Access Policy Manager (APM)
remote access
security
  • Mike_61719's avatar
    Mike_61719
    Icon for Cirrus rankCirrus
    Aug 01, 2011
    You can do the AND or OR statement if you so desire. It's quite flexible.

     

     

    Can you be more specific on the second question. It's a little vague.
  • Peter_Wang_7400's avatar
    Peter_Wang_7400
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2011
    This is what I have configured at the moment. I have two separate checks: one for each registry key.

     

     

    \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters ."Domain"="a.abc.com" OR "\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "."Domain"="b.abc.com" OR "\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "."Domain"="c.abc.com"

     

     

    \HKEY_LOCAL_MACHINE \SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion."Parent"= "server1" OR "\HKEY_LOCAL_MACHINE \SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion"."Parent" = "server2" OR "\HKEY_LOCAL_MACHINE \SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion"."Parent" = "server3"

     

     

    However, this is not working. It says “Access was denied by the access policy. This may be due to a failure to meet access policy requirements”

     

     

    The Windows file check is actually fine. I wasn't sure if APM could take the whole path in the field.

     

     

    C:\Windows\System32\OEMINFO.INI

     

     

    Any advice for the registry check?
  • Mike_61719's avatar
    Mike_61719
    Icon for Cirrus rankCirrus
    Aug 05, 2011
    So on the Firepass this will work. My APM license expired so I can't test at the moment.

     

     

    You may have the syntax wrong, this is what it is on the Firepass. I forgot the exact APM syntax.

     

     

    ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"."Domain"="a.abc.com")