When you create a session or preauthentication policy, you can check for the existence and value of registry entries on the user device. The session is established only if the particular entry exists or has the configured or higher value.
When configuring a registry expression, use the following guidelines:
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\Citrix\\\\Secure\ Access\ Client_ProductVersion
CLIENT.REG(HKEY_LOCAL_MACHINE\\\\Software\\\\Symantec\\Norton\ AntiVirus_Version).VALUE == 22.214.171.124 -frequency 5
The following is a registry expression that looks for the NetScaler Gateway Plug-in registry key when users log on:
Registry checks are supported under the following most common five types:
Registry values to be checked use the following types:
For the string value type, case-sensitivity is checked.
For DWORD type, the value is compared and must be equal.
Other types, such as Binary and Multi-String, are not supported.
You can add a value to the expression. The value can be a software version, service pack version, or any other value that appears in the registry. If the data value in the registry does not match the value you are testing against, users are denied logon.