Cisco Cisco Clean Access 3.5

A rule is a condition statement made up of one or more checks. A rule combines checks with logical 
operators to form a Boolean statement that can test multiple features of the client system. Cisco Clean 
Access provides a set of pre-configured rules and checks through the Updates link. Pre-configured rules 
have a prefix of “pr” in their names, for example, pr_AutoUpdateCheck_Rule. 

A check is a condition statement that examines a feature of the client system, such as a file, registry key, 
service, or application. Pre-configured checks have a prefix of “pc” in their names, for example, 
pc_Hotfix828035. 

 lists the types of checks available and what they test. 

Note that pre-configured rules and checks are not editable, but can serve as templates. To modify a 
non-editable check or a rule, make a copy of it first by clicking the corresponding Copy button (

). 

Copies of checks are added to the bottom of the Check List, in the form 

copy_of_checkname

. Copies of 

rules are added to the bottom of the Rules List, in the form 

copy_of_rulename

. Click the corresponding 

Edit button (

) to bring up the Edit form to modify the check or rule. The edited checks and rules can 

then be configured and associated to requirements and roles as described in the following sections. 

In the Clean Access Agent tab, click the Rules submenu and then open the New Check form

Registry check

whether or not a registry key exists

registry key value

File Check

whether or not a file exists

date of modification or creation

file version

Service check

whether or not a service is running 

Application check

whether or not an application is running