Configuring Operating System Policies

January 29, 2019

Contributed by: C

When you create a session or preauthentication policy, you can configure client security strings to determine whether or not the user device is running a particular operating system when users log on. You can also configure the expression to check for a particular service pack or hotfix.

The values for Windows and Macintosh are:

Operating system	Value
Mac OS X	macos
Windows 8.1	win8.1
Windows 8	win8
Windows 7	win7
Windows Vista	vista
Windows XP	winxp
Windows Server 2008	win2008
Windows Server 2003	win2003
Windows 2000 Server	win2000
Windows 64-bit platform	win64

To configure an operating system policy

In the configuration utility, in the navigation pane, do one of the following:
1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Policies and then click Session.
2. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Policies > Authentication/Authorization, and then click Pre-Authentication EPA.
In the details pane, on the Policies tab, click Add.
In Name, type a name for the policy.
Next to Match Any Expression, click Add.
In the Add Expression dialog box, in Expression Type, select Client Security.
Configure the settings for the following:
1. In Component, select Operating System.
2. In Name, type the name of the operating system.
3. In Qualifier, do one of the following:
  - Leave blank.
  - Select Service Pack.
  - Select Hotfix.
  - Select Version for Mac OS X only.
4. Depending on your selection in Step C, in Operator, do one of the following:
  - If Qualifier is blank, in Operator, select EQUAL (= =), NOTEQUAL (!=), EXISTS or NOTEXISTS.
  - If you selected Service Pack or Hotfix, select the operator and in Value, type the value.
Click Create and then click Close.

If you are configuring a service pack, such as client.os (winxp).sp, if a number is not in the Value field, NetScaler Gateway returns an error message because the expression is invalid.

If the operating system has service packs present, such as Service Pack 3 and Service Pack 4, you can configure a check just for Service Pack 4, because the presence of Service Pack 4 automatically indicates that previous service packs are present.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring Operating System Policies

January 29, 2019

Contributed by: C

Configuring Operating System Policies

To configure an operating system policy

Configuring Operating System Policies

In this article