-
Selecting the Citrix Gateway plug-in for Users
-
AlwaysOn VPN before Windows logon (Formally AlwaysOn service)
This content has been machine translated dynamically.
Dieser Inhalt ist eine maschinelle Übersetzung, die dynamisch erstellt wurde. (Haftungsausschluss)
Cet article a été traduit automatiquement de manière dynamique. (Clause de non responsabilité)
Este artículo lo ha traducido una máquina de forma dinámica. (Aviso legal)
此内容已经过机器动态翻译。 放弃
このコンテンツは動的に機械翻訳されています。免責事項
이 콘텐츠는 동적으로 기계 번역되었습니다. 책임 부인
Este texto foi traduzido automaticamente. (Aviso legal)
Questo contenuto è stato tradotto dinamicamente con traduzione automatica.(Esclusione di responsabilità))
This article has been machine translated.
Dieser Artikel wurde maschinell übersetzt. (Haftungsausschluss)
Ce article a été traduit automatiquement. (Clause de non responsabilité)
Este artículo ha sido traducido automáticamente. (Aviso legal)
この記事は機械翻訳されています.免責事項
이 기사는 기계 번역되었습니다.책임 부인
Este artigo foi traduzido automaticamente.(Aviso legal)
这篇文章已经过机器翻译.放弃
Questo articolo è stato tradotto automaticamente.(Esclusione di responsabilità))
Translation failed!
Configuring Registry Policies
When you create a session or preauthentication policy, you can check for the existence and value of registry entries on the user device. The session is established only if the particular entry exists or has the configured or higher value.
When configuring a registry expression, use the following guidelines:
-
Four backslashes are used to separate keys and subkeys, such as
HKEY_LOCAL_MACHINE\\\\SOFTWARE
-
Underscores are used to separate the subkey and the associated value name, such as
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\VirusSoftware_Version
-
A backslash (\) is used to denote a space, such as in the following two examples:
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\Citrix\\\\Secure\ Access\ Client_ProductVersion
CLIENT.REG(HKEY_LOCAL_MACHINE\\\\Software\\\\Symantec\\Norton\ AntiVirus_Version).VALUE == 12.8.0.4 -frequency 5
The following is a registry expression that looks for the Citrix Gateway plug-in registry key when users log on:
CLIENT.REG(secureaccess).VALUE==HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\CITRIX\\\\Secure\Access\Client_ProductVersion
Note: If you are scanning for registry keys and values and you select Advanced Free-Form in the Expression dialog box, the expression must start with CLIENT.REG
Registry checks are supported under the following most common five types:
- HKEY_CLASSES_ROOT
- HKEY_CURRENT_USER
- HKEY_LOCAL_MACHINE
- HKEY_USERS
- HKEY_CURRENT_CONFIG
Registry values to be checked use the following types:
-
String
For the string value type, case-sensitivity is checked.
-
DWORD
For DWORD type, the value is compared and must be equal.
-
Expanded String
Other types, such as Binary and Multi-String, are not supported.
-
Only the ‘==’ comparison operator is supported.
-
Other comparison operators, such as <, > and case-sensitive comparisons are not supported.
-
The total registry string length should be less than 256 bytes.
You can add a value to the expression. The value can be a software version, service pack version, or any other value that appears in the registry. If the data value in the registry does not match the value you are testing against, users are denied logon.
Note: You cannot scan for a value within a subkey. The scan must match the named value and the associated data value.
To configure a registry policy
- In the configuration utility, in the navigation pane, do one of the following:
- In the configuration utility, on the Configuration tab, in the navigation pane, expand Citrix Gateway > Policies and then click Session.
- In the configuration utility, on the Configuration tab, in the navigation pane, expand Citrix Gateway > Policies > Authentication/Authorization, and then click Pre-Authentication EPA.
- In the details pane, on the Policies tab, click Add.
- In Name, type a name for the policy.
- Next to Match Any Expression, click Add.
- In the Add Expression dialog box, in Expression Type, select Client Security.
- Configure the settings for the following:
- In Component, select Registry.
- In Name, type the name of the registry key.
- In Qualifier, leave blank or select Value.
- In Operator, do one of the following:
- If Qualifier is left blank, select EXISTS or NOTEXISTS
- If you selected Value in Qualifier, select either == or !==
- In Value, type the value as it appears in the registry editor, click OK and then click Close.
Share
Share
In this article
This Preview product documentation is Cloud Software Group Confidential.
You agree to hold this documentation confidential pursuant to the terms of your Cloud Software Group Beta/Tech Preview Agreement.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation.
The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Cloud Software Group product purchase decisions.
If you do not agree, select I DO NOT AGREE to exit.