User`s guide

AT&T Global Network Client for Windows Administrator’s Guide
© 2015 AT&T Intellectual Property. All rights reserved. AT&T, the AT&T logo and all other AT&T marks contained herein are trademarks of AT&T Intellectual Property and/or
AT&T affiliated companies. All other marks contained herein are the property of their respective owners. Images are shown for illustrative purposes only; individual
experience may vary. This document is not an offer, commitment, representation or warranty by AT&T and is subject to change.
Windows is a registered trademark of Microsoft Corporation in the United States and other countries.
-80-
Specified File
To prevent connections based on whether a specific file exists on the user's system, use the LPE_FILE
Public Property at install time. If the specified file does not exist, then a connection will not be allowed.
Registry hive in HKEY_LOCAL_MACHINE
To prevent connections based on whether a specific file exists on the user's system, use the LPE_REG
Public Property at install time. If the specified registry hive does not exist, then a connection will not be
allowed. For example, if you have company defined asset information entry in the
HKEY_LOCAL_MACHINE hive, that would not be on a non-asset system, you can use that information to
prevent a connection, e.g. LPE_FILE="SOFTWARE\MyCompany\Asset\Identifier"
Application Monitoring
The application monitor feature allows a Customer Account Administrator to specify configuration
policies to monitor antivirus programs, firewalls, anti-spyware programs and VPN clients for remote-
access connections connected with the AT&T Global Network Client. The rules are configured through a
custom kit. Some basic Lightweight Policy Enforcement rules can be enforced by a using the XML based
CONFIG_FILE Public Property at installation time.
A threshold value indicating the number of failed compliance checks allowed before the AT&T Global
Network Client performs the compliance failure action can be configured by the Customer Account
Administrator through customization. See the LPE_COMPLIANCE_THRESHOLD public property in the
chapter on Customizations for more information.
When VPN monitoring rules are created, if the monitored VPN client disconnects from the VPN server,
the AT&T Global Network Client will likewise disconnect the remote access connection.
Types of Applications Monitored
Pre-defined antivirus, firewall, anti-spyware and VPN applications can be monitored. The following table
shows the types of applications that can be monitored, as well as what is monitored.
Application Type Items Monitored
Firewall
• Whether Process is Running
• Product Version
Anti-Virus
• Whether Process is Running
• Product Version
• Virus Definition File Timestamp
Anti-Spyware
• Whether Process is Running
• Product Version
• Anti-Spyware Definition File Timestamp
VPN
• Whether client is connected or not
For a complete list of applications see the web site at http://www.corp.att.com/agnc.