apm policy agent endpoint-windows-check-file¶

apm policy agent endpoint-windows-check-file(1) BIG-IP TMSH Manual apm policy agent endpoint-windows-check-file(1)

NAME
endpoint-windows-check-file - Manages an Endpoint Windows Check File agent.

MODULE
apm policy agent

SYNTAX
Configure the endpoint-windows-check-file component within the policy agent module using the following syntax.

edit endpoint-windows-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties

DISPLAY
list endpoint-windows-check-file
list endpoint-windows-check-file [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-windows-check-file
show running-config endpoint-windows-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all
all-properties
app-service
current-module
non-default-properties
one-line
partition

DELETE
delete endpoint-windows-check-file ([name] | all)

DESCRIPTION
Access Policy Manager checks for the presence of one or more files on a client that is attempting to connect. If a file
with the described properties exists, the action goes to the successful branch. If the file does not exist, or a file
exists but one or more properties are not correct, the action goes to the fallback branch.

You can use the endpoint-windows-check-file component to create or manage an Endpoint Windows Check File agent that
verifies the presence of specified Windows files on a client.

EXAMPLES
create endpoint-windows-check-file Myprofile_act_file_check_ag { files { filename "C:\\demo\\demofile" md5
"6b61ad518c23650b17e738e1fa2bb04e" modified 2007-06-01 10:30:10 size 12 } { filename "C:\\demo\\test.file" md5
"f20d9f2072bbeb6691c0f9c5099b01f3" size 9 } }
Creates the Endpoint Windows Check File agent named Myprofile_act_file_check_ag that checks that the client contains
two files located in the C:\demo directory: a 12 byte file named demofile that was modified no later than January 6,
2007 at 10:30 and has an MD5 checksum of 6b61ad518c23650b17e738e1fa2bb04e, and a 9 byte file named test.file that has
an MD5 check sum of f20d9f2072bbeb6691c0f9c5099b01f3.

list all endpoint-windows-check-file Company8profile_act_file_check_ag
Displays information about the Endpoint Windows Check File agent named Company8profile_act_file_check_ag.

delete endpoint-windows-check-file Company8profile_act_check_file { files { filename "C:\\demo\\demofile" }}
Deletes the C:\demo\demofile file from the Endpoint Windows Check File agent named Company8profile_act_file_check_ag.

OPTIONS
app-service
Specifies the name of the application service to which the object belongs. The default value is none. Note: If the
strict-updates option is enabled on the application service that owns the object, you cannot modify or delete the
object. Only the application service can modify or delete the object.

files
Adds files to or deletes files from an Endpoint Windows Check File agent. You can specify the following attributes for
the files that you want an Endpoint Windows Check File agent to verify the presence of on the client to allow the
access policy to pass.

filename
Specifies a file name and includes the full path. The Endpoint windows Check File agent you are creating must be
able to verify the file's presence on the client for the access policy to pass. When you add a file to or delete
a file from the agent, this setting is required.

md5 Specifies the value of an MD5 checksum. The Endpoint windows Check File agent that you are creating must match
the checksum on the client for the access policy to pass. The default is none.

modified
Specifies the last modified date of the specified file. The Endpoint windows Check File agent you are creating
must verify this date on the client for the access policy to pass. The default is 1970-01-01 00:00:00.

operation
Specifies the operator that you want your Endpoint Windows Check File agent to use when verifying the attributes
of the specified file on the client. The default is equal.

signer
Specifies that the Endpoint Windows Check File agent must verify that the specified file on the client is signed
for the access policy to pass. The default is none.

size Specifies the size, in bytes, of the specified file. The Endpoint Windows Check File agent you are creating must
verify this file size on the client for the access policy to pass. The default is 0.

version
Specifies the version of the specified file that you want your Endpoint Windows Check File agent to verify on the
client for the access policy to pass. Specify the version using the following form: x.x.x.x. The maximum value is
65535.65535.65535.65535. The default is none.

continuous-check
Continuously check the files, and end the session if the result changes. The default is false.

[name]
Specifies the name of an Endpoint Windows Check File agent. This option is required.

partition
Displays the partition within which the component resides.

SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-check-process, endpoint-mac-check-file, endpoint-mac-
check-process, endpoint-windows-check-file, endpoint-windows-browser-cache-cleaner, endpoint-windows-check-process,
endpoint-windows-check-registry, endpoint-windows-group-policy, endpoint-windows-info-os, endpoint-machine-info, endpoint-
windows-protected-workspace

COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or mechanical, including
photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser's personal
use, without the express written permission of F5 Networks, Inc.

BIG-IP 2015-07-22 apm policy agent endpoint-windows-check-file(1)