Hi, We're running an SA platform using IVE OS 6.5. Right now we're using Host Checker to check several things, and among them are OS Check and Patch Assessment. Right now our configuration is quite simple, we have 2 rules: - OSCheck: It allows only a few version of Windows (XPSP2, 2000SP4, VISTASP1, etc...) - PatchCheck: It allows only computers with the specified patches installed on the system. Now the question is as follow: Let's say there is a patch that exists only for Windows Vista, and that we add it to the rule PatchCheck. If there is a user on Windows XP (who can't possibly have this patch on its computer) who wants to connect to the SA, is he going to be denied ? Or is the Host Checker going to do a "smart" check on the computer ? (meaning that the Juniper knows this patch can't be present on a XP client, and therefore will allow the computer). Thanks for your advices. Regards, TIb ... View more

Hi, I'm using Host Checker and Cache Cleaner to check the integrity of our user's computer, it's working fine. However a normal verification takes about 2 minutes (minimum) which is very very long for a user... We did some tests, running a few scenarios and we found out that we have Cache Cleaner that takes about 20 seconds and Host Checker about 60 seconds. We did some further test and we found out that the Patch Assessment takes about 40 seconds to perform (wether we check 1 or 10 patchs). When not using using it, the Host Checker takes only 20 seconds, which is far better. We're running 6.5, and I was wondering if anyone got any idea with how to speed up this process of Patch Assessment ? Tib JNCIA FW/SSL/JUNOS JNCIS FW/SSL/SEC ... View more