Nortel Networks 4050 Configuring SRS rules, TunnelGuard user interface, TunnelGuard SRS Builder

318Chapter 7 TunnelGuard SRS Builder

Configuring SRS rules

The building blocks used to construct the Software Requirement Set (SRS) are files (or combinations of files) and registry key settings that must either be present or be absent on the client host. You can create different SRS rules for different groups.

You must use the TunnelGuard SRS Builder in the SREM to create or modify SRS rules. You cannot create your own SRS rules using the CLI.

You can use the TunnelGuard quick setup wizard in either the CLI or the SREM to create a test rule (srs-rule-test), which you can subsequently modify using the TunnelGuard SRS Builder. To create the test rule, see “Using the quick TunnelGuard setup wizard in the CLI” on page 134 or “Using the TunnelGuard Quick Setup in the SREM” on page 172. The test rule tests for the presence of the following file on the client host:

C:\tunnelguard\tg.txt

To create an SRS rule, perform the following steps:

1Create a software definition (see “Creating a software definition” on page 327)

2Add entries to the software definition (see “Adding entries to a software definition” on page 328 and “Creating a registry entry” on page 341)

3Create logical expressions (see “Creating logical expressions” on page 333)

Note: When creating an SRS rule, consider the user rights that clients in your network have on their machines. For example, do not configure an SRS rule to check for registry items that users may not be authorized to access.

The TunnelGuard user interface

To learn more about an item, select one of the following topics:

•“Menu commands” on page 319

•“SRS definition toolbar” on page 322

320818-A