apm policy agent endpoint-mac-check-file
apm policy agent endpoint-mac-BIG-IapmMpolicyuagent endpoint-mac-check-file(1)
NAME
endpoint-mac-check-file - Manages an Endpoint Macintosh Check File
agent.
MODULE
apm policy agent
SYNTAX
Configure the endpoint-mac-check-file component within the policy
agent module using the following syntax.
CREATE/MODIFY
create endpoint-mac-check-file [name]
modify endpoint-mac-check-file [name]
options
continuous-check [ true | false ]
app-service [[string] | none]
files [ filename | md5 | modified | size ]
edit endpoint-mac-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list endpoint-mac-check-file
list endpoint-mac-check-file [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-mac-check-file
show running-config endpoint-mac-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all
all-properties
app-service
current-module
non-default-properties
one-line
partition
DELETE
delete endpoint-mac-check-file ([name] | all)
DESCRIPTION
Access Policy Manager checks for the presence of one or more files on a
client that is attempting to connect. If a file with the described
properties exists, the action goes to the successful branch. If the
file does not exist, or a file exists but one or more properties are
not correct, the action goes to the fallback branch.
You can use the endpoint-mac-check-file component to create or manage
an Endpoint Macintosh Check File agent that verifies the presence of
specified Macintosh files on a client.
EXAMPLES
create endpoint-mac-check-file Myprofile_act_file_check_ag { files {
filename "/tmp/demo/demofile" md5 "6b61ad518c23650b17e738e1fa2bb04e"
modified 2007-06-01 10:30:10 size 12 } { filename "/tmp/demo/testfile"
md5 "f20d9f2072bbeb6691c0f9c5099b01f3" size 9 } }
Creates the Endpoint Macintosh Check File agent named
Myprofile_act_file_check_ag that checks that the client contains
two files located in the /tmp/demo directory: a 12 byte file named
demofile that was modified no later than January 6, 2007 at 10:30
and has an MD5 checksum of 6b61ad518c23650b17e738e1fa2bb04e, and a
9 byte file named testfile that has an MD5 check sum of
f20d9f2072bbeb6691c0f9c5099b01f3.
list all endpoint-mac-check-file Company8profile_act_file_check_ag
Displays information about the Endpoint Macintosh Check File agent
named Company8profile_act_file_check_ag.
delete endpoint-mac-check-file Company8profile_act_check_file { files {
filename "/tmp/demo/demofile" }}
Deletes the /tmp/demo/demofile file from the Endpoint Macintosh
Check File agent named Company8profile_act_file_check_ag.
OPTIONS
app-service
Specifies the name of the application service to which the object
belongs. The default value is none. Note: If the strict-updates
option is enabled on the application service that owns the object,
you cannot modify or delete the object. Only the application
service can modify or delete the object.
files
Adds files to or deletes files from an Endpoint Macintosh Check
File agent. You can specify the following attributes of the files
that you want an Endpoint Macintosh Check File agent to verify the
presence of on the client to allow the access policy to pass:
filename
Specifies the name of the file and includes the full path.
The Endpoint Macintosh Check File agent that you are creating
must be able to verify the file's presence on the client for
the access policy to pass. When you add a file to or delete a
file from the agent, this setting is required.
md5 Specifies the value of an MD5 checksum. The Endpoint
Macintosh Check File agent you are creating must be able to
match the checksum on the client for the access policy to
pass. The default is none.
modified
Specifies the last modified date of the specified file. The
Endpoint Macintosh Check File agent you are creating must
verify this date on the client for the access policy to pass.
The default is 1970-01-01 00:00:00.
size Specifies the size, in bytes, of the specified file. The
Endpoint Macintosh Check File agent you are creating must
verify this size on the client for the access policy to pass.
The default is 0.
continuous-check
Continuously check the files, and end the session if the result
changes. The default is false.
[name]
Specifies the name of an Endpoint Macintosh Check File agent. This
setting is required.
partition
Displays the partition within which the component resides.
SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-
check-process, endpoint-mac-check-process, endpoint-windows-browser-
cache-cleaner, endpoint-windows-check-file, endpoint-check-machine-
cert, endpoint-windows-check-process, endpoint-windows-check-registry,
endpoint-windows-group-policy, endpoint-windows-info-os, endpoint-
machine-info, endpoint-windows-protected-workspace
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.AAA
BIG-IP 2apm-policy agent endpoint-mac-check-file(1)