User`s guide

AT&T Global Network Client for Windows Administrator’s Guide
© 2015 AT&T Intellectual Property. All rights reserved. AT&T, the AT&T logo and all other AT&T marks contained herein are trademarks of AT&T Intellectual Property and/or
AT&T affiliated companies. All other marks contained herein are the property of their respective owners. Images are shown for illustrative purposes only; individual
experience may vary. This document is not an offer, commitment, representation or warranty by AT&T and is subject to change.
Windows is a registered trademark of Microsoft Corporation in the United States and other countries.
-79-
AT&T Lightweight Policy Enforcement
AT&T Lightweight Policy Enforcement (LPE) is an optional service available to AT&T customers using the
AT&T Global Network Client for connectivity. AT&T Lightweight Policy Enforcement performs basic
application monitoring and can be customized by the Customer Account Administrator at installation
time.
Installation of the Lightweight Policy Enforcement feature is optional. Customer Account Administrators
can use control Lightweight Policy Enforcement definitions using the XML CONFIG_FILE Public Property at
installation time or the Windows Installer ADDLOCAL and REMOVE properties to control installation of
the feature for all users. See the Customizations Chapter on page 48 of this guide for more information
about installation customization.
Lightweight Policy Enforcement feature can also be used to monitor 3
rd
party VPN client.
Asset Based Connection Prevention
Beginning in 9.6, connections can be prevented based on
• Operating System/Service Packs
• A specified file
• A registry hive in HKEY_LOCAL_MACHINE
Operating System
Allow range of Operating Systems to be used
With the AGNC_LPE_OS_RANGE public property, the lowest allowed, highest allowed, or lowest and
highest together. For
Allow range of Operating Systems to be used
To prevent connections based on obsolete or unsupported Operating Systems or Service Packs, you can
do so by using the Public Property, LPE_OS_RANGE at install time. By specifying the numeric value range
of the Operating System, connections will not be allowed. For example, if the company policy is to
prevent connections on Windows Vista, you would specify:
LPE_OS_RANGE=6.0.6000-6.0.6002
6.0.6000 is Vista RTM and 6.0.6002 is Vista Service Pack 2.
For more information on Operating System build numbers, see http://msdn.microsoft.com/en-
us/library/windows/desktop/aa370556(v=vs.85).aspx
For multiple ranges, the config file should be used instead of public properties.