330Chapter 7 TunnelGuard SRS Builder

If enabled, the client system will be searched for the specified file name, irrespective of path to folder.

6In the Process Name field, enter the name of the process whose module you wish to add as a software definition entry.

The name of the selected process is displayed by default.

7In the Min and Max Version area, you can specify the minimum or maximum version of the file/module.

If there are no restrictions as to version (minimum or maximum) select Any.

8Choose one of the following actions:

Select the Relative Date/Time Range button and specify the maximum file age.

Lets you specify the file age in number of days.

Select the Specific Date/Time Range button and specify the desired time range or specific date/time.

Lets you specify a date/time range or an exact date/time referring to when the file was created or last modified.

9Select the Vendor API Call Check check box to invoke a 3rd-party API call for doing additional checking on the software.

One of the features of TunnelGuard is the ability to specify an API that you want to use to check a file, such as an executable. TunnelGuard supports the use of API calls that check on either startup, when the component (for example, an executable or DLL) is launched from a file on disk; or during runtime, when a component is already launched and running in memory.

For more information, see “Making API calls” on page 351.

10Select the Enable Hash Checking check box to enable hash value checking of the current SRS entry.

Then paste the hash value to be checked in the Hash Value field. The hash value of a selected file/module (if any) is displayed by default.

11Click OK.

320818-A

Page 330
Image 330
Nortel Networks 4050 manual For more information, see Making API calls on