Configuring Compound Client Security Expressions

October 5, 2020

Contributed by:

S C

You can combine client security strings to form compound client security expressions.

The Boolean operators that are supported in Citrix Gateway are:

And (&&)
Or ( )
Not (!)

For greater precision, you can group the strings together using parentheses.

Note: If you use the command line to configure expressions, use parentheses to group security expressions together when you form a compound expression. The use of parentheses improves the understanding and debugging of the client expression.

Configuring Policies with the AND (&&) Operator

The AND (&&) operator works by combining two client security strings so that the compound check passes only when both checks are true. The expression is evaluated from left to right and if the first check fails, the second check is not carried out.

You can configure the AND (&&) operator using the keyword ‘AND’ or the symbols ‘&&’.

Example:

The following is a client security check that determines if the user device has Version 7.0 of Sophos antivirus installed and running. It also checks if the Net Logon service is running on the same computer.

CLIENT.APPLICATION.AV(sophos).version==7.0 AND CLIENT.SVC(netlogon) EXISTS
<!--NeedCopy-->

This string can also be configured as:

CLIENT.APPLICATION.AV(sophos).version==7.0 && CLIENT.SVC(netlogon) EXISTS
<!--NeedCopy-->

Configuring Policies with the OR ( || ) Operator

The OR (

) operator works by combining two security strings. The compound check passes when either check is true. The expression is evaluated from left to right and if the first check passes, the second check is not carried out. If the first check does not pass, the second check is carried out.

You can configure the OR (

) operator using the keyword ‘OR’ or the symbols ‘

’.

Example:

The following is a client security check that determines if the user device has either the file c:\file.txt on it or the putty.exe process running on it.

client.file(c:\\\\\\\\file.txt) EXISTS) OR (client.proc(putty.exe) EXISTS
<!--NeedCopy-->

This string can also be configured as

client.file(c:\\\\\\\\file.txt) EXISTS) || (client.proc(putty.exe) EXISTS
<!--NeedCopy-->

Configuring Policies Using the NOT (! ) Operator

The NOT (!) or the negation operator negates the client security string.

Example:

The following client security check passes if the file c:\\sophos\_virus\_defs.dat file is NOT more than two days old:

\!(client.file(c:\\\\\\\\sophos\_virus\_defs.dat).timestamp==2dy)
<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring Compound Client Security Expressions

October 5, 2020

Contributed by:

S C

October 5, 2020

Contributed by:

S C

Configuring Compound Client Security Expressions

Configuring Policies with the AND (&&) Operator

Configuring Policies with the OR ( || ) Operator

Configuring Policies Using the NOT (! ) Operator

In this article