This message was deleted.

Im currently testing EPA in a post-auth scenario. We're looking to test for an active anti-virus product and the device being up to date at the OS level. The OPSWAT rules have Mac categories you can test with. What are you looking for on the Mac's to determine if they should be allowed in or not?

Hey Felix, the customer suggested know machine name which feels very insecure... Im open to ideas... are you saying it possible to check for AV/updates on a Mac client using ADC EPA? Cheers

I agree a machine name doesnt seem a very secure thing to test against. Yes, you can scan for AV and updates as well as other things. Take a look here: https://docs.citrix.com/en-us/citrix-gateway/current-release/vpn-user-config/advance[…]s/advanced-endpoint-analysis-policy-expression-reference.html for a table of things you can check for, and observe the note that macOS specific scans add the prefix "MAC" to the type.

Legend... I'll have a read 🙂