Product Documentation

Configuring Quarantine Groups

Jan 27, 2014

When you configure a quarantine group, you configure the client security expression using the Security Settings - Advanced Settings dialog box within a session profile.

To configure the client security expression for a quarantine group

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Policies and then click Session.
  2. In the details pane, on the Policies tab, click Add.
  3. In Name, type a name for the policy.
  4. Next to Request Profile, click New.
  5. In Name, type a name for the profile.
  6. On the Security tab, click Advanced Settings.
  7. Under Client Security, click Override Global and then click New.
  8. In the Client Expression dialog box, configure the client security expression and then click Create.
  9. In Quarantine Group, select the group.
  10. In Error Message, type a message that describes the problem for users and then click Create.
  11. In the Create Session Policy dialog box, next to Named Expressions, select General, select True value, click Add Expression, click Create and then click Close.

After you create the session policy, bind it to a user, group, or virtual server.

Note: If the endpoint analysis scan fails and the user is put in the quarantine group, the policies that are bound to the quarantine group are effective only if there are no policies bound directly to the user that have an equal or lower priority number than the policies bound to the quarantine group.

To configure a global quarantine group

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Global Settings.
  2. In the details pane, under Settings, click Change global settings.
  3. On the Security tab, click Advanced Settings.
  4. In Client Security, configure the client security expression.
  5. In Quarantine Group, select the group.
  6. In Error Message, type a message that describes the problem for users and then click OK.