In case of third-party products (for example Virus scanner), Auto-Remediation may not work with all available engine versions. As fallback, the client always requests manual action.

List 2–24Access Control Service Trustzone - Rules - Required Health State Basic – section Service Settings

Parameter

Description

 

 

 

NG Personal

Required

Firewall On

Required <Auto-Remediation>

 

Not Required (default)

 

Set to Required if a client must have the personal firewall up and running to be healthy.

 

If the client does not meet this requirement, the user will be advised to turn on the firewall.

 

 

 

Antivirus

Required

Scanner On

Required <Auto-Remediation>

 

Not Required (default)

Set to Required if a client must have the virus scanner up and running to be healthy.

If the client does not meet this requirement, the user will be advised to turn on the virus scanner.

Note:

The option Required only takes effect when the checkbox Antivirus is selected (figure 2–12, page 31).

Antispyware

Required

Scanner On

Required <Auto-Remediation>

 

Not Required (default)

Set to Required if a client must have the anti spyware scanner up and running to be healthy.

If the client does not meet this requirement, the user will be advised to turn on the anti spyware scanner.

Note:

The option Required only takes effect when the checkbox Antispyware is selected (figure 2–12, page 31).

List 2–25Access Control Service Trustzone - Rules - Required Health State Basic – section Misc

Parameter

Description

 

 

Continue Match

• STOP on Health Mismatch (default)

 

• Continue on Health Mismatch

 

Set this to Continue on Health Mismatch if the health validation should be continued with the next policy rule in the policy

 

rule set, if the health-evaluation in the current rule gave the result that the client is not healthy.

 

Set this to STOP on Health Mismatch if health validation should NOT continue with the next policy rule in the policy rule

 

set if the client is not healthy.

 

In this case the Policy Attributes of the current rule are assigned to the client, and the client is advised to heal itself.

Registry Check Rules Here choose one of the Registry Check objects. The client’s registry entries must match those of the selected registry check object to be healthy.

List 2–26Access Control Service Trustzone - Rules - Required Health State Basic

Parameter Description

Antivirus

Select this checkbox to enable the Antivirus settings parameters. Parameter description see list 2–27.(Default: not selected)

Antispyware Select this checkbox to enable the Antispyware settings parameters. Parameter description see list 2–28.(Default: not selected)

List 2–27Access Control Service Trustzone - Rules - Required Health State Basic – section Antivirus

Parameter

Description

 

 

 

AV Real Time Protection

Required

 

Required <Auto-Remediation>

 

Not Required (default)

Set to Required if a client must have enabled the real time protection of the anti virus scanner to be healthy.

If the client does not meet this requirement, it will be advised to turn on the real time protection of the virus scanner.

Last AV Scan Not Older Than

Ignore

6-Hours > 1-Month

24-Hours (default)

Set to a value unequal Ignore to ensure that the client’s last full virus scan is not older than <value> to be healthy. If the client does not meet this requirement, it will be advised to perform a full anti virus scan.

32 Server Config – Access Control Service

Page 34
Image 34
Barracuda Networks VERSION SP4 manual Antispyware Required Scanner On, Not Required default