31-35
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter31 Managing Dynamic Access Policies for Remote Access VPNs (ASA 8.0+ Devices)
Dynamic Access Page (ASA)
Add/Edit DAP Entry Dialog Box > Registry
Registry key scans apply only to computers running Windows Microsoft Windows operating systems.
Basic Host Scan ignores registry key scans if the computer is running Mac OS or Linux.
Note Duplicate entries are not allowed. If you configure a dynamic access policy with no AAA or endpoint
attributes, the security appliance always selects it since all selection criteria are satisfied.
Navigation Path
Open the Add/Edit Dynamic Access Policy Dialog Box, page 31-12 with the Main tab selected, then
click Create, or select a dynamic access policy in the table and click Edit. The Add/Edit DAP Entry
dialog box is displayed. Select Registry as the Criterion.
Related Topics
•Understanding DAP Attributes, page 31-3
•Configuring DAP Attributes, page31-7
•Configuring Dynamic Access Policies, page 31-2
Field Reference
Path Select the check box, then select the matching criteria (for example, is)
from the drop-down list, and enter the name of the process. You can
display it in Microsoft Windows by opening the Windows Task
Manager window and clicking the Processes tab.
Configure Host Scan before you configure this attribute. When you
configure Host Scan, the configuration displays in this pane, so you can
select it and specify the same index when you assign this entry as an
endpoint attribute when configuring a DAP, reducing the possibility of
errors in typing or syntax.
Table31-19 Add/Edit DAP Entry Dialog Box > Process (Continued)
Element Description
Table31-20 Add/Edit DAP Entry Dialog Box > Registry
Element Description
Criterion Shows Registry as the selection criterion.