Forum Discussion

Matt_Forder_589's avatar
Matt_Forder_589
Icon for Nimbostratus rankNimbostratus
Jul 28, 2008

Using Trusted Windows Versions in Protected Configurations

Hi all,

 

 

I've created a customer Protected Configuration and I'm trying to configure the Trusted Windows Version property of the configuration so that only specific versions of Windows are allowed, e.g. Windows XP SP2.

 

 

On the actual properties page there is a field for "Windows Version" and a second field for "Hotfixes" but what I can't work out is the syntax that these fields are expecting. For example in the "Windows Version" field I have tried:

 

* WinXP

 

* (session.win_info.os_version == "WinXP")

 

 

Neither of which seem to work. Similarily I have tried the following in the "Hotfixes" field:

 

* hf_SP2

 

* EXISTS(session.win_info.hotfixes.hf_SP2)

 

 

Again, the above don't seem to work. I've RTFM'd the admin guide and the online help and while both documents list the appropriate session variables neither of them actually document the syntax that is expected when using the "Trusted Windows Version" property of a Protected Configuration, and none of the example Protected Configurations use sessions variable either.

 

 

Can someone please steer me in the right direction before my brain spontaneously combusts?

 

 

Thanks!
BIG-IP Access Policy Manager (APM)
remote access
security
  • mal_57091's avatar
    mal_57091
    Icon for Nimbostratus rankNimbostratus
    Jul 29, 2008
    Hey Matt,

     

     

    The best way i've done this in the past (cause there is a million different session variables) is to enable the "Session Variable Dump" under Device Management -> Maintenance -> Troubleshooting tools. Then create a prelogon sequence that checks does an OS Check and then do an Extended Windows Info check.

     

     

    Once these have set in place open a connection to FirePass from a machine that you want the info from (in your case WinXP SP2) and log in. After you have logged in go back to the FirePass AdminUI and go to Reports -> Logons and select the user account you just logged in with. With Session Variable Dump enabled this page will list out all the info FirePass picked up from the Prelogon Sequence and you can copy and paste the session variables and values you are interested in into your Protected Configuration.

     

     

    Hope this helps you out.

     

     

    Cheers,

     

    Mal