apm policy agent endpoint-windows-check-registry
apm policy agent endpoint-windows-check-registry(1BIG-IP TMSH Manuapm policy agent endpoint-windows-check-registry(1)
NAME
endpoint-windows-check-registry - Manages an Endpoint Windows Check Registry agent.
MODULE
apm policy agent
SYNTAX
Configure the endpoint-windows-check-registry component within the policy agent module using the following
syntax.
CREATE/MODIFY
create endpoint-windows-check-registry [name]
modify endpoint-windows-check-registry [name]
options:
continuous-check [ true | false ]
app-service [[string] | none]
expression [[string] | none]
edit endpoint-windows-check-registry [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list endpoint-windows-check-registry
list endpoint-windows-check-registry [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-windows-check-registry
show running-config endpoint-windows-check-registry [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
partition
show endpoint-windows-check-registry
show endpoint-windows-check-registry [name]
DELETE
delete endpoint-windows-check-registry [name]
DESCRIPTION
You can use the endpoint-windows-check-registry component to create and manage an agent that collects
information about the Windows registry keys on the client that is attempting to connect.
EXAMPLES
create endpoint-windows-check-registry MyEndpointWCRagent
{"\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\".\"Version\"=\"5.0.2800.0\"" }
Creates the Endpoint Windows Check Registry agent named MyEndpointWCRagent that checks the registry on
the client for version 5.0.2800.0 of Internet Explorer in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
directory.
create endpoint-windows-check-registry MyEndpointWCRagent
{"\"HKEY_LOCAL_MACHINE64\\SOFTWARE\\Microsoft\\Internet Explorer\".\"Version\"=\"5.0.2800.0\""
Creates the Endpoint Windows Check Registry agent named MyEndpointWCRagent that checks the registry on
the client for version 5.0.2800.0 of Internet Explorer in the HKEY_LOCAL_MACHINE64\SOFTWARE\Microsoft
directory.
Note that the registry value HKEY_LOCAL_MACHINE64 is one of the 32 and 64-bit registry keys that you can
specify on 64-bit Windows versions. On 64-bit Windows systems, you can check for registry keys in either
the 64-bit registry or the 32-bit registry. To specify the registry to check, append a number to the
registry root key name. The following key names are supported:
HKEY_CURRENT_USER
HKEY_CURRENT_USER32
HKEY_CURRENT_USER64
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE32
HKEY_LOCAL_MACHINE64
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT32
HKEY_CLASSES_ROOT64
HKEY_USERS
HKEY_USERS32
HKEY_USERS64 HKEY values specified with a 32 allow you to check values in the 32-bit view of 64-bit
registry. This is the perspective used by 32-bit applications running with on a 64-bit operating system.
HKEY values with a 64 appended allow you to check values in the 64-bit view of the registry. This is the
perspective used by native 64-bit applications. When checking values on 32-bit Windows, the number of
bits specified in the registry key name is ignored.
list endpoint-windows-check-registry
Displays a list of Endpoint Windows Check Registry agents.
delete endpoint-windows-check-registry MyEndpointWCRagent delete
Deletes the Endpoint Windows Check Registry agent named MyEndpointWCRagent.
OPTIONS
app-service
Specifies the name of the application service to which the object belongs. The default value is none.
Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
modify or delete the object. Only the application service can modify or delete the object.
expression
Specifies the expression that you want an Endpoint Windows Check Registry agent to use to verify the
registry entries that are present on the client in order to allow the access policy to pass. You can use
the following operators: AND, OR, NOT, (and).
If the check is successful, the system returns 1. If the check fails, the system returns 0. If the
expression is incorrect, the system returns -1.
Important: You must use quotation marks (" ") around key and value arguments, and in data when the
content contains spaces, commas, slashes, tabs, or other delimiters. If quotation marks exist as part of
a registry path or value name, you must use quotation marks around those quotation marks.
Tip: The system treats data in the formats "d.d[.d][.d]" or "d,d[,d][,d]" (where d is a number) as a
version number. The system treats data in the format "mm/dd/yyyy" as a date.
continuous-check
Continuously check the expression, and end the session if the result changes. The default is false.
[name]
Specifies the name of the an Endpoint Windows Check Registry agent. This option is required.
partition
Displays the partition within which the component resides.
SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-check-process, endpoint-mac-check-file,
endpoint-mac-check-process, endpoint-windows-browser-cache-cleaner, endpoint-windows-check-file, endpoint-
check-machine-cert, endpoint-windows-check-process, endpoint-windows-group-policy, endpoint-windows-info-os,
endpoint-machine-info, endpoint-windows-protected-workspace
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.
BIG-IP 2013-05-30 apm policy agent endpoint-windows-check-registry(1)