Chapter 7 TunnelGuard SRS Builder 331

The file/module is added as an entry in the selected software definition. By clicking the Save and More button, the entry is saved but the Create New Memory Module SRS window remains open so you can add more entries to the current software definition.

12Select the TunnelGuard Rule Definition tab.

A TunnelGuard SRS rule and expression with the same name as the software definition are automatically created and shown on the TunnelGuard Rule Definition tab. The expression is shown in the Available Expressions area bottom left of the TunnelGuard Rule Definition tab.

The TunnelGuard SRS rule can now be mapped to the desired user group. If needed, a new software definition can be created. The expression created for this software definition can be used to form a new logical expression, including both the new and the existing expression. See “Creating logical expressions” on page 333.

Selecting file on disk

This method lets you add files that are not shown in the memory snapshot. Select a file from the local file system, for example a text configuration file, and add it as a software definition entry. You can also add files that are not present on your file system, such as malicious files. Using the NOT operand when forming logical expressions, you can then instruct TunnelGuard to verify that certain files are not present on the client system.

Nortel Secure Network Access Switch 4050 User Guide

Page 331
Image 331
Nortel Networks 4050 manual Selecting file on disk, Select the TunnelGuard Rule Definition tab