Forum Discussion

Chris_Premo_131's avatar
Chris_Premo_131
Icon for Nimbostratus rankNimbostratus
Aug 24, 2013

Virus Check - Push Update if Fail

We have an Access Policy that check for Up-to-Date Virus program. As designed it works, but we would like to "Push" DAT file updates from our ePO 5.0 server to the PC if they fail rather than just e...
BIG-IP Access Policy Manager (APM)
security
El_Jefe's avatar
El_Jefe
Icon for Nimbostratus rankNimbostratus
Aug 26, 2013

Chris -

 

One thing you could possibly do, is grant them network access, but ACL them off except for connections to the AV servers and the DC. Then fire off a specific login script forcing an AV update. Or, launch the update app. This way, you have a secure area to update their AV in.

 

http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-network-access-11-3-0/2.htmlunique_1690746321

 

Hope this helps.

 

Jeff