NetScaler Gateway

Configuring Antivirus, Firewall, Internet Security, or Antispam Expressions

October 5, 2020

Contributed by:

You configure settings for antivirus, firewall, Internet security, and antispam policies within the Add Expression dialog box. The settings for each policy are the same: the differences are the values that you select. For example, if you want to check the user device for Norton AntiVirus Version 10 and ZoneAlarm Pro, you create two expressions within the session or preauthentication policy that specify the name and version number of each application.

When you select Client Security as the expression type, you can configure the following:

Component: The type of client security, such as antivirus, firewall, or registry entry.
Name: The name of the application, process, file, registry entry, or operating system.
Qualifier: The version or the value of the component for which the expression checks.
Operator: Checks if the value exists or is equal to the value.
Value: The application version for antivirus, firewall, Internet security, or antispam software on the user device.
Frequency: Frequency with which a post-authentication scan is run, in minutes.
Error weight: A weight assigned to each error message contained in a nested expression when multiple expressions have different error strings. The weight determines which error message appears.
Freshness: Defines how old a virus definition can be. For example, you can configure the expression so virus definitions are no older than three days.

To add a client security policy to a preauthentication or session policy

In the configuration utility, in the navigation pane, do one of the following:
1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Policies and then click Session.
2. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Policies > Authentication/Authorization, and then click Pre-Authentication EPA.
In the details pane, on the Policies tab, click Add.
In Name, type a name for the policy.
Next to Match Any Expression, click Add.
In the Add Expression dialog box, in Expression Type, select Client Security.
Configure the settings for the following:
1. In Component, select the item for which to scan.
2. In Name, type the name of the application.
3. In Qualifier, select Version.
4. In Operator, select the value.
5. In Value, type the client security string, click OK, click Create and then click Close.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring Antivirus, Firewall, Internet Security, or Antispam Expressions

October 5, 2020

Contributed by:

October 5, 2020

Contributed by:

Configuring Antivirus, Firewall, Internet Security, or Antispam Expressions

To add a client security policy to a preauthentication or session policy

In this article