APM windows KB posture checks
I would like to understand how the APM (posture check) windows KB checks works exactly.
Based on the sample condition below, will the F5 compares all of the KB's or any one or few of them to pass the connection successfully.
Expression: expr { [mcget {session.windows_info_os.last.updates}] contains "123456" || [mcget {session.windows_info_os.last.updates}] contains "7891011" || [mcget {session.windows_info_os.last.updates}] contains "3247922"
Is there any order in which the KB checks happen?
We observed an issue with a user unable to connect to VPN due to KB checks failing. The client machine had a few additional KB's compared with access profile.
We still had common/matching KB's on F5 and client machine.
Later once we added the additional KB on client machine to access profile, it resolved the issue.