EPA policy for AV and FW scan fails on Mac OS 10.13
book
Article ID: CTX229928
calendar_today
Updated On:
Description
EPA policy expression created on OPSWAT editor does not work on MAC OS 10.13 after upgrading from 10.12
Example:
CLIENT.APPLICATION('ANTIVIR_0_RTP_==_TRUE[COMMENT: Generic Antivirus Product Scan]') EXISTS" <Action Name>
CLIENT.APPLICATION('FIREWALL_0_ENABLED_==_TRUE[COMMENT: Generic Firewall Product Scan]') EXISTS" <Action Name>
Resolution
Mac OS 10.13 does not support EPA policies created using OPSWAT currently.
Citrix is currently working on OPSWAT for MAC 10.13 and the feature will be released in Q2 2018.
However, classic EPA policies can be created to check local firewall only on MAC OS 10.13 as a workaround
Example :
(REQ.HTTP.HEADER User-Agent CONTAINS “abc” || CLIENT.OS(MacOS).VERSION == 10.xx)
NOTE:
MAC OS 10.13 is supported with EPA plugins versions 3.4.1 and 3.9.9 which are distributed with NetScaler 11.1.57.11 and 12.0.57.19 respectively.
Problem Cause
EPA plugin support for with MAC OS 10.13
Additional Information
For additional information and supported EPA scans and software please refer to https://support.citrix.com/article/CTX207623
Links to EPA plugins that support MAC OS 10.13:
https://www.citrix.com/downloads/netscaler-gateway/plug-ins/netscaler-gateway-plug-in-clients-v111-5711.html
https://www.citrix.com/downloads/netscaler-gateway/plug-ins/netscaler-gateway-plug-in-399-for-mac.html
Was this article helpful?
thumb_up
Yes
thumb_down
No