Add a registry endpoint attribute to a DAP record

Registry endpoint attributes allow you to define specific registry keys that the system scans during posture assessment to determine endpoint compliance status.

Scanning for registry endpoint attributes applies to Windows operating systems only.

Before you begin

Before configuring a registry endpoint attribute, define the registry key for which you want to scan in the Secure Firewall Posture window for Cisco Secure Desktop.

Procedure

Step 1

Choose Secure Connections > Dynamic Access Policy.

Step 2

Create or edit a DAP policy and a DAP record.

Step 3

Click the Endpoint Criteria tab and click Registry.

Step 4

Select the Match criteria as All or Any.

Step 5

Click + to add registry attributes.

In the Registry dialog box, configure these parameters:

  1. Select the Entry Path for the registry and specify the path.

  2. From the Endpoint ID drop-down list, choose the ID for the registry or click + to configure a posture assessment criteria for the registry. For more information, see Configure posture assessment criteria.

  3. Choose the existence of the registry, Exists or Does not exist.

  4. Select the registry Type from the list.

  5. Select the equals (=) or does not equal (≠) operator and enter the Value of the registry key.

  6. Select Case insensitive to disregard the case of the registry entry while scanning.

  7. Click Save.