Configuring HIP Objects

This section is located at the libraries hip-object level

To create a HIP object, use the following command:

Admin@nodename# create libraries hip-object <parameters>

Specify the following parameters:

Parameter

Description

name

The name of the HIP object.

description

A description of the HIP object.

process

Check the processes running on the device.

running-services

Check the services running on the device.

installed-updates

Check that a specific update is installed on the device. The Microsoft Knowledge Base (KB) article number must be specified, e.g., KB5013624.

os-version

The version of the operating system on the user device.

products

Conformance check settings:

  • antimalware: antimalware on the device

    • products: product name

    • vendor: product vendor

  • firewall: firewall on the device

    • products: product name

    • vendor: product vendor

  • backup: backup software

    • products: product name

    • vendor: product vendor

  • disk-encryption: disk encryption software on the device

    • products: product name

    • vendor: product vendor

  • dlp: data leakage protection system on the device

    • products: product name

    • vendor: product vendor

  • patch-management: software for installing updates on the device

    • products: product name

    • vendor: product vendor

registry-keys

Microsoft Windows registry key is a registry where OS settings and parameters are stored.

The following types of registry values are supported:

  • REG_SZ: a null-terminated Unicode or ANSI string

  • REG_BINARY: binary data of any form

  • REG_DWORD: a 32-bit number

The following registry keys can be checked:

  • HKEY_LOCAL_MACHINE

  • HKEY_USERS

Important! The path specification begins with a backslash (\), such as \HKEY_LOCAL_MACHINE, followed by the full registry path with backslash (\) used as the separator.

For a description of registry keys, read the Microsoft documentation.

security

Checking the active components:

  • firewall: firewall (yes, no, do not check)

  • virus-protection: anti-malware (yes, no, do not check)

  • automatic-update: install updates automatically (yes, no, do not check)

  • bitlocker: disk encryption (yes, no, do not check)

ug-client-version

The version of the UserGate client software.

To edit HIP object parameters, use the following command:

Admin@nodename# set libraries hip-object <hip-object-name> <parameters>

To remove an object, use the following command:

Admin@nodename# delete libraries hip-object <hip-object-name>

To display information on all objects or on a certain object, use the following commands:

Admin@nodename# show libraries hip-object Admin@nodename# show libraries hip-object <hip-object-name>