I wanto to build a scenario by which my SA grants limited network access to a user whose AV software is not up to date. For instance, to let him reach a protected subnet that hosts the corporate AV server so he is able to update the AV definition files and then be allowed to have full intranet access.
À Would you please direct me to a page with such an example?
Any hints will be greatly appreciated.
Evaluate host checker at realm level.
Protect the "full network access" role with your host check (fully updated AV).
If the host check fails, then give the user a role (that doesn't have this requirement) wich only has access to your AV update server.
Thank you very much for your suggestion. I implemented it according to your idea and it worked OK.
Best regards, Rogelio