7.From the Attribute drop-down list (Figure 7-31),select Cisco:PA:PA-Version. The operator value should be set to >= and the value set to 2.0.0.0. This simply means that we are setting up a check for the Cisco Trust Agent to be present on the endpoint, and that it must be running version 2.0.0.0 or later. Click Enter when this is done, and then Submit.

Figure 7-31 Adding a condition set

Chapter 7. Network enforcement subsystem implementation

249

Page 267
Image 267
IBM Tivoli and Cisco manual 249, Adding a condition set