Gateway

EPA scan classification types on Windows client

January 8, 2024

Contributed by:

Important:

Endpoint Analysis is intended to analyze the user device against pre-determined compliance criteria and does not enforce or validate the security of end-user devices. It is recommended to use endpoint security systems to protect devices from local admin attacks.

The following new classification types are added to the EPA scan for missing patches. The EPA scan fails if the client has any of the following missing patches.

Application
Connectors
CriticalUpdates
DefinitionUpdates
DeveloperKits
FeaturePacks
Guidance
SecurityUpdates
ServicePacks
Tools
UpdateRollups
Updates

Notes:

Earlier, the EPA scans for missing patches were done on the severity levels; Critical, Important, Moderate, and Low on the Windows client.

If you are using Citrix Secure Access for Windows 23.8.1.1 and above, the scan CLIENT.SYSTEM('WIN-UPDATE_SCAN-TIME') is limited to client machines that have the automatic updates enabled. If the automatic updates are disabled, this scan returns a different outcome.

Configure the EPA scan classification types by using the GUI

Navigate to NetScaler Gateway > Policies > Preauthentication.
Create a new preauthentication policy or edit an existing policy.
Click the OPSWAT EPA Editor link.
In Expression Editor, select Windows > Windows Update.
In Shouldn’t have missing patch of following windows update classification type, select the classification type for the missing patches.
Click OK.

Customers can upgrade to the OPSWAT version 4.3.2744.0s to use these options.

References

For details about the Windows server update services classification GUIDs, see https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85).
For the description of the Microsoft software updates terminology, see https://docs.microsoft.com/en-us/troubleshoot/windows-client/deployment/standard-terminology-software-updates.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

EPA scan classification types on Windows client

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

EPA scan classification types on Windows client

Configure the EPA scan classification types by using the GUI

References

In this article