70-31
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter70 Configuring Dynamic Access Policies
Configuring Endpoint Attributes Used in DAPs
Device endpoint.device.hostname Endpoint string 64 Host Name only. Not
FQDN.
endpoint.device.MAC string Must be in the
format
xxxx.xxxx.xxxx
where x is a
hexadecimal
character.
Mac Address for a
network interface card.
Only one Mac address
per entry.
endpoint.device.id string 64 BIOS Serial Number.
The number format is
manufacturer-specific.
There is no format
requirement.
endpoint.device.port string An integer
between 1 and
65535.
TCP port in listening
state. You can define a
single port per line.
endpoint.device.protection None
(Host
Scan)
Scure
Desktop
(either
Cache
Cleaner or
Vaul t )
64 Defines which
component of CSD will
execute for the
particular PreLogin
Policy.
endpoint.device.protection_version string 64 Version of Host Scan
image they are running.
endpoint.device.protection_extension string 64 Versionof Endpoint
Assessment
(OPSWAT)
File endpoint.file["label"].exists Secure
Desktop
true — The files exists
endpoint.file[“label”].endpointid
endpoint.file["label"].lastmodified integer — Seconds since file was
last modified
endpoint.file["label"].crc.32 integer — CRC32 hash of the file
NAC endpoint.nac.status NAC string — User defined status
string
Operating
System
endpoint.os.version Secure
Desktop
string 32 Operating system
endpoint.os.servicepack integer — Service pack for
Windows
Table70-3 Endpoint Attribute Definitions (continued)
Attribute Type Attribute Name Source Value
Max String
Length Description