apm policy agent endpoint-mac-check-file
apm policy agent endpoint-mac-check-file(1) BIG-IP TMSH Manual apm policy agent endpoint-mac-check-file(1)
NAME
endpoint-mac-check-file - Manages an Endpoint Macintosh Check File agent.
MODULE
apm policy agent
SYNTAX
Configure the endpoint-mac-check-file component within the policy agent module using the following syntax.
CREATE/MODIFY
create endpoint-mac-check-file [name]
modify endpoint-mac-check-file [name]
options
continuous-check [ true | false ]
app-service [[string] | none]
files [ filename | md5 | modified | size ]
edit endpoint-mac-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list endpoint-mac-check-file
list endpoint-mac-check-file [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-mac-check-file
show running-config endpoint-mac-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all
all-properties
app-service
current-module
non-default-properties
one-line
partition
DELETE
delete endpoint-mac-check-file ([name] | all)
DESCRIPTION
Access Policy Manager checks for the presence of one or more files on a client that is attempting to connect.
If a file with the described properties exists, the action goes to the successful branch. If the file does not
exist, or a file exists but one or more properties are not correct, the action goes to the fallback branch.
You can use the endpoint-mac-check-file component to create or manage an Endpoint Macintosh Check File agent
that verifies the presence of specified Macintosh files on a client.
EXAMPLES
create endpoint-mac-check-file Myprofile_act_file_check_ag { files { filename "/tmp/demo/demofile" md5
"6b61ad518c23650b17e738e1fa2bb04e" modified 2007-06-01 10:30:10 size 12 } { filename "/tmp/demo/testfile" md5
"f20d9f2072bbeb6691c0f9c5099b01f3" size 9 } }
Creates the Endpoint Macintosh Check File agent named Myprofile_act_file_check_ag that checks that the
client contains two files located in the /tmp/demo directory: a 12 byte file named demofile that was
modified no later than January 6, 2007 at 10:30 and has an MD5 checksum of
6b61ad518c23650b17e738e1fa2bb04e, and a 9 byte file named testfile that has an MD5 check sum of
f20d9f2072bbeb6691c0f9c5099b01f3.
list all endpoint-mac-check-file Company8profile_act_file_check_ag
Displays information about the Endpoint Macintosh Check File agent named
Company8profile_act_file_check_ag.
delete endpoint-mac-check-file Company8profile_act_check_file { files { filename "/tmp/demo/demofile" }}
Deletes the /tmp/demo/demofile file from the Endpoint Macintosh Check File agent named
Company8profile_act_file_check_ag.
OPTIONS
app-service
Specifies the name of the application service to which the object belongs. The default value is none.
Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
modify or delete the object. Only the application service can modify or delete the object.
files
Adds files to or deletes files from an Endpoint Macintosh Check File agent. You can specify the following
attributes of the files that you want an Endpoint Macintosh Check File agent to verify the presence of on
the client to allow the access policy to pass:
filename
Specifies the name of the file and includes the full path. The Endpoint Macintosh Check File agent
that you are creating must be able to verify the file's presence on the client for the access policy
to pass. When you add a file to or delete a file from the agent, this setting is required.
md5 Specifies the value of an MD5 checksum. The Endpoint Macintosh Check File agent you are creating
must be able to match the checksum on the client for the access policy to pass. The default is none.
modified
Specifies the last modified date of the specified file. The Endpoint Macintosh Check File agent you
are creating must verify this date on the client for the access policy to pass. The default is
1970-01-01 00:00:00.
size Specifies the size, in bytes, of the specified file. The Endpoint Macintosh Check File agent you are
creating must verify this size on the client for the access policy to pass. The default is 0.
continuous-check
Continuously check the files, and end the session if the result changes. The default is false.
[name]
Specifies the name of an Endpoint Macintosh Check File agent. This setting is required.
partition
Displays the partition within which the component resides.
SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-check-process, endpoint-mac-check-process,
endpoint-windows-browser-cache-cleaner, endpoint-windows-check-file, endpoint-check-machine-cert, endpoint-
windows-check-process, endpoint-windows-check-registry, endpoint-windows-group-policy, endpoint-windows-info-
os, endpoint-machine-info, endpoint-windows-protected-workspace
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.AAA
BIG-IP 2013-05-30 apm policy agent endpoint-mac-check-file(1)