User manual

Chapter 49 Endpoint Security
ZyWALL USG 300 User’s Guide
805
The following table gives an overview of the objects you can configure.
Table 230 Configuration > Object > Endpoint Security > Add
LABEL DESCRIPTION
Show Advance
Settings / Hide
Advance
Settings
Click this button to display a greater or lesser number of configuration
fields.
General Setup
Object
Name
Specify a descriptive name for identification purposes. You can enter up
to 31 characters (“0-9”, “a-z”, “A-Z”, “-”, “_” with no spaces allowed).
Description Enter a description of this object. It is not used elsewhere. You can use
alphanumeric and
()+/:=?!*#@$_%- characters, and it can be up to 60
characters long.
Passing
Criterion
Select whether the user’s computer has to match just one of the
endpoint security object’s checking criteria or all of them.
Checking
Item -
Operating
System
Endpoint
Operating
System
Select the type of operating system the user’s computer must be using.
The checking items in the rest of the screen vary depending on the
selected operating system. If you select Mac OSX, there are no other
checking items.
Others allows access for computers not using Windows, Linux, or Mac
OSX operating systems. For example you create Windows, Linux, and
Mac OSX endpoint security objects to apply to your LAN users. An
“others” object allows access for LAN computers using Solaris, HP,
Android, or other operating systems.
Windows
Version
If you selected Windows as the operating system, select the version of
Windows here.
Endpoint
must
update to
Windows
Service
Pack
If you selected Windows as the operating system, you can enter the
minimum Windows service pack number the user’s computer must have
installed. The user’s computer must have this service pack or higher. For
example, “2” means service pack 2. Leave the field blank to have the
ZyWALL ignore the Windows service pack number.
Checking Item
- Windows
Update and
Security Patch
If you selected Windows as the operating system, you can select whether
or not the user’s computer must have the Windows Auto Update feature
activated.
You can also use the table to list Windows security patches that the
user’s computer must have installed. The user’s computer must have all
of the listed Windows security patches installed to pass this checking
item. Click Add to create a new entry. Select one or more entries and
click Remove to delete it or them.