Cisco Systems Adding a Process Endpoint Attribute to a DAP

70-27
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter70 Configuring Dynamic Access Policies
Configuring Endpoint Attributes Used in DAPs
To set this value, after you have defined all instances of the endpoint attribute, click the Logical Op.
button and select the Match Any or Match All button. If you do not specify a Logical Operation, Match
Any is used by default.
Detailed Steps
Step1 In the Endpoint Attribute Type list box, select Policy.
Step2 Check the Location checkbox and set the operation field to be equal to (=) or not equal to (!=) the Cisco
Secure Desktop Microsoft Windows location profile. Enter the Cisco Secure Desktop Microsoft
Windows location profile string in the Location text box.
Step3 Click OK.
Step4 Return to Configuring Dynamic Access Policies, page 70-10.
Additional References
See Endpoint Attribute Definitions, page 70-29 for additional information on the Policy endpoint
attribute requirements.
Adding a Process Endpoint Attribute to a DAP
Prerequisites
•Configuring Process endpoint attributes as selection criteria for DAP records is part of a larger
process. Read Configuring Dynamic Access Policies, page 70-10 before you configure Personal
Firewall endpoint attributes.
•Before configuring a Process endpoint attribute, define the process for which you want to scan in
the Host Scan window for Cisco Secure Desktop. In ASDM select Configuration > Remote Access
VPN > Secure Desktop Manager > Host Scan. Click Help on that page for more information.
Guidelines
You can create multiple instances of each type of endpoint attribute. For each of these types, you need
to decide whether the DAP policy should require that the user have all instances of a type (Match all =
AND) or only one of them (Match Any = OR).
To set this value, after you have defined all instances of the endpoint attribute, click the Logical Op.
button and select the Match Any or Match All button. If you do not specify a Logical Operation, Match
All is used by default.
Detailed Steps
Step1 In the Endpoint Attribute Type list box, select Process.
Step2 Click the appropriate Exists or Does not exist button to indicate whether the selected endpoint attribute
and its accompanying qualifiers (fields below the Exists and Does not exist buttons) should be present
or not.
Step3 In the Endpoint ID list box, choose from the drop-down list the endpoint ID for which you want to scan.