Host Checker: limited network usage when user«s AV is not up to date

[ralvez_]

Hello team:

I wanto to build a scenario by which my SA grants limited network access to a user whose AV software is not up to date. For instance, to let him reach a protected subnet that hosts the corporate AV server so he is able to update the AV definition files and then be allowed to have full intranet access.

À Would you please direct me to a page with such an example?

Any hints will be greatly appreciated.

[Lilja_]

Evaluate host checker at realm level.

Protect the "full network access" role with your host check (fully updated AV).

If the host check fails, then give the user a role (that doesn't have this requirement) wich only has access to your AV update server.

[ralvez_]

Thank you very much for your suggestion. I implemented it according to your idea and it worked OK.

Best regards, Rogelio