EPA policy for AV and FW scan fails on Mac OS 10.13

EPA policy for AV and FW scan fails on Mac OS 10.13

book

Article ID: CTX229928

calendar_today

Updated On:

Description

EPA policy expression created on OPSWAT editor does not work on MAC OS 10.13 after upgrading from 10.12

Example:

CLIENT.APPLICATION('ANTIVIR_0_RTP_==_TRUE[COMMENT: Generic Antivirus Product Scan]') EXISTS" <Action Name>
CLIENT.APPLICATION('FIREWALL_0_ENABLED_==_TRUE[COMMENT: Generic Firewall Product Scan]') EXISTS" <Action Name>
 

Resolution

Mac OS 10.13 does not support EPA policies created using OPSWAT currently.
Citrix is currently working on OPSWAT for MAC 10.13 and the feature will be released in Q2 2018.

However, classic EPA policies can be created to check local firewall only on MAC OS 10.13 as a workaround
Example : 
(REQ.HTTP.HEADER User-Agent CONTAINS “abc” || CLIENT.OS(MacOS).VERSION == 10.xx)

NOTE:
​MAC OS 10.13 is supported with EPA plugins versions 3.4.1 and 3.9.9 which are distributed with NetScaler 11.1.57.11 and 12.0.57.19 respectively.


 

Problem Cause

EPA plugin  support for with MAC OS 10.13


 

Additional Information

For additional information and supported EPA scans and software please refer to https://support.citrix.com/article/CTX207623

Links to EPA plugins that support MAC OS 10.13:

https://www.citrix.com/downloads/netscaler-gateway/plug-ins/netscaler-gateway-plug-in-clients-v111-5711.html 

https://www.citrix.com/downloads/netscaler-gateway/plug-ins/netscaler-gateway-plug-in-399-for-mac.html