This article describes how to obtain the process name to create a NetScaler Gateway EPA policy for Mac OS.

Background

Mac OS policies are created the same way on the NetScaler Gateway as Windows policies. Mac OS policies only differ in the processes syntax. Since Mac OS is a BSD based Operating System, a scan will not detect regular .exe processes as it would in Windows (unless the user has Wine running to be able to execute these). Mac computers generally run .dmg or .app executable files.

Instructions

Use the following example to obtain the name of a process in order to create a NetScaler Gateway EPA policy for Mac OS:

1. Create a preauthentication profile by navigating to NetScaler Gateway > Policies > Preauthentication, as you would for a regular Windows EPA policy. For detailed information on procedure, refer to Citrix Documentation  - Configuring Advanced Endpoint Analysis Scans
2. From the Mac's CLI, execute the ps -ax command and use grep to filter the results based on your process keyword. In this case, let us use use 'kav' as this is the antivirus installed:
   ps -ax | grep kav

   1172 ?? 0:00.43 /Library/Application Support/Kaspersky Lab/KAV/Applications/Kaspersky Anti-Virus Agent.app/Contents/MacOS/kav_agent -autolaunch 1 
   1173 ?? 0:01.93 /Library/Application Support/Kaspersky Lab/KAV/Binaries/kav -r -bl 

3. Based on the preceding output, create an EPA policy on the NetScaler Gateway that includes the process 'kav' on the expression as shown:
   CLIENT.APPLICATION.PROCESS(kav) EXISTS