If your primary concern is keyloggers, I would suggest that you could leave the password policies alone and instead add-on OPSWAT Gears for keylogger detection. It's a common use case for customers integrating SSL VPN with our endpoint posture checker to look for advanced compliance items (disk encryption for example) as well as performing a fast PUA and malware scan. Check out the attached video showing how it can be added to host checker. ... View more

Hi, We (OPSWAT) have identified the root caues of the issue. A fix will be issued in the next scheduled update and we may make a patch available to Juniper before then. ... View more

Hi Clough, I work for the OEM that provides some of hte host checker functionality. I've run some diagnostics and our detection appears to be working okay for 11.645, so I've opened a ticket internally to see where the issue may be. How many endpoints do you have already upgraded to 11.645 definitions? Regards, Adam ... View more