Specifications
9-76
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Configuring Agent-Based Posture Assessment
c. For Registry Value searches, enter a Value Dat a Type :
1. For a “Number” Value Data Type (Note: REG_DWORD is equivalent to Number), choose one
of the following Operators from the dropdown: equals, greater than, less than, does not equal,
greater than or equal to, less than or equal to
2. For a “String” Value Data Type choose one of the following Operators from the dropdown:
equals, equals (ignore case), does not equal, starts with, does not start with, ends with, does not
end with, contains, does not contain.
3. For a “Version” Value Data Type choose one of the following Operators from the dropdown:
earlier than, later than, same as.
4. For a “Date” Value Data Type, choose one of the following Operators from the dropdown:
earlier than, later than, same as.
d. If specifying a “Date” Value Data Type, also choose one of two values to check. This allows you
to specify “older than” or “newer than” by more than/fewer than x days to the current date.
–
Type the date/time of the client machine in mm/dd/yyyy hh:MM:ss format.
–
Choose the CAM date, + or - from the dropdown, and type the number of days.
e. Type the Value D ata for a Registry Value search.
Note For the “String” Value Data Type, the maximum length for a string is 256 characters.
File Checks
• File Existence—Checks whether a file exists on the system.
• File Date—Checks whether a file with a particular modification or creation date exists on the
system.
• File Version—Checks whether a particular version of a file exists on the system.
Figure 9-33 File Check Types