apm policy agent endpoint-windows-check-file¶

apm policy agent endpoint-windows-check-file(1) BIG-IP TMSH Manual apm policy agent endpoint-windows-check-file(1)

NAME
endpoint-windows-check-file - Manages an Endpoint Windows Check File agent.

MODULE
apm policy agent

SYNTAX
Configure the endpoint-windows-check-file component within the policy agent module using the following syntax.

edit endpoint-windows-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties

DISPLAY
list endpoint-windows-check-file
list endpoint-windows-check-file [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-windows-check-file
show running-config endpoint-windows-check-file [ [ [name] | [glob] | [regex] ] ... ]
options:
all
all-properties
app-service
current-module
non-default-properties
one-line
partition

DELETE
delete endpoint-windows-check-file ([name] | all)

DESCRIPTION
Access Policy Manager checks for the presence of one or more files on a client that is attempting to connect.
If a file with the described properties exists, the action goes to the successful branch. If the file does not
exist, or a file exists but one or more properties are not correct, the action goes to the fallback branch.

You can use the endpoint-windows-check-file component to create or manage an Endpoint Windows Check File agent
that verifies the presence of specified Windows files on a client.

EXAMPLES
create endpoint-windows-check-file Myprofile_act_file_check_ag { files { filename "C:\\demo\\demofile" md5
"6b61ad518c23650b17e738e1fa2bb04e" modified 2007-06-01 10:30:10 size 12 } { filename "C:\\demo\\test.file" md5
"f20d9f2072bbeb6691c0f9c5099b01f3" size 9 } }
Creates the Endpoint Windows Check File agent named Myprofile_act_file_check_ag that checks that the
client contains two files located in the C:\demo directory: a 12 byte file named demofile that was
modified no later than January 6, 2007 at 10:30 and has an MD5 checksum of
6b61ad518c23650b17e738e1fa2bb04e, and a 9 byte file named test.file that has an MD5 check sum of
f20d9f2072bbeb6691c0f9c5099b01f3.

list all endpoint-windows-check-file Company8profile_act_file_check_ag
Displays information about the Endpoint Windows Check File agent named Company8profile_act_file_check_ag.

delete endpoint-windows-check-file Company8profile_act_check_file { files { filename "C:\\demo\\demofile" }}
Deletes the C:\demo\demofile file from the Endpoint Windows Check File agent named
Company8profile_act_file_check_ag.

OPTIONS
app-service
Specifies the name of the application service to which the object belongs. The default value is none.
Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
modify or delete the object. Only the application service can modify or delete the object.

files
Adds files to or deletes files from an Endpoint Windows Check File agent. You can specify the following
attributes for the files that you want an Endpoint Windows Check File agent to verify the presence of on
the client to allow the access policy to pass.

filename
Specifies a file name and includes the full path. The Endpoint windows Check File agent you are
creating must be able to verify the file's presence on the client for the access policy to pass.
When you add a file to or delete a file from the agent, this setting is required.

md5 Specifies the value of an MD5 checksum. The Endpoint windows Check File agent that you are creating
must match the checksum on the client for the access policy to pass. The default is none.

modified
Specifies the last modified date of the specified file. The Endpoint windows Check File agent you
are creating must verify this date on the client for the access policy to pass. The default is
1970-01-01 00:00:00.

operation
Specifies the operator that you want your Endpoint Windows Check File agent to use when verifying
the attributes of the specified file on the client. The default is equal.

signer
Specifies that the Endpoint Windows Check File agent must verify that the specified file on the
client is signed for the access policy to pass. The default is none.

size Specifies the size, in bytes, of the specified file. The Endpoint Windows Check File agent you are
creating must verify this file size on the client for the access policy to pass. The default is 0.

version
Specifies the version of the specified file that you want your Endpoint Windows Check File agent to
verify on the client for the access policy to pass. Specify the version using the following form:
x.x.x.x. The maximum value is 65535.65535.65535.65535. The default is none.

continuous-check
Continuously check the files, and end the session if the result changes. The default is false.

[name]
Specifies the name of an Endpoint Windows Check File agent. This option is required.

partition
Displays the partition within which the component resides.

SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-check-process, endpoint-mac-check-file,
endpoint-mac-check-process, endpoint-windows-check-file, endpoint-windows-browser-cache-cleaner, endpoint-
windows-check-process, endpoint-windows-check-registry, endpoint-windows-group-policy, endpoint-windows-info-
os, endpoint-machine-info, endpoint-windows-protected-workspace

COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.

BIG-IP 2015-07-22 apm policy agent endpoint-windows-check-file(1)