8
6
Fork
You've already forked windows
1

Sanity check #128

Open
opened 2019年11月27日 23:06:20 +01:00 by efef · 2 comments
efef commented 2019年11月27日 23:06:20 +01:00 (Migrated from github.com)
Copy link

The Activity Center in Windows reports anti-virus state & windows update states
For specific VPN connections it has added value if the Windows host is up2date before the client connects.
We need to discuss the details further.

The Activity Center in Windows reports anti-virus state & windows update states For specific VPN connections it has added value if the Windows host is up2date before the client connects. We need to discuss the details further.
rozmansi commented 2020年02月27日 15:27:10 +01:00 (Migrated from github.com)
Copy link

The client should programmatically check, if:

  • Automatic updates are enabled. Checking if the system is truly up-to-date would be too error prone.
  • Anti-virus real-time scanning is enabled.

Both checks should be implemented querying built-in Windows Security centre.

Should any of the checks fail, client would refuse to connect to the "institute access", while still allowing "internet access".

A periodic check should be introduced to disconnect the client should security checks fail at later time.

The client should programmatically check, if: - Automatic updates are enabled. Checking if the system is truly up-to-date would be too error prone. - Anti-virus real-time scanning is enabled. Both checks should be implemented querying built-in Windows Security centre. Should any of the checks fail, client would refuse to connect to the "institute access", while still allowing "internet access". A periodic check should be introduced to disconnect the client should security checks fail at later time.

The generic way to solve this might be for the backend to require/support some signed response by custom software running on the client. Easiest way to implement this would probably be to call a binary and send its output.

The generic way to solve this might be for the backend to require/support some signed response by custom software running on the client. Easiest way to implement this would probably be to call a binary and send its output.
Sign in to join this conversation.
No Branch/Tag specified
master
study/no-token-import
ver/3.x
govVPN
ver/3.3.0.x
ver/2.x
ver/1.x
4.6
4.5.99.8
4.5.99.7
4.5.99.6
4.5.99.5
4.5.99.4
4.5.99.3
4.5.99.2
4.5.99.1
4.5.99.0
4.5
4.4.99.4
4.4.99.3
4.4.99.2
4.4.99.1
4.4.99.0
4.4
4.3.99.1
4.3.99.0
4.3.2
4.3.1
4.3
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0
3.255.23
3.255.22
3.255.21
3.255.20
3.255.19
3.7
3.6.2
3.6.1
3.255.18
3.255.17
3.255.16
3.255.15
3.6
3.255.14
3.5
3.255.13
3.4.3
3.255.12
3.255.11
3.255.10
3.255.9
3.255.8
3.255.7
3.255.6
3.255.5
3.255.4
3.255.3
3.255.2
3.4.2
3.4.1
3.255.1
3.255
3.4
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.0.1
3.3.3
3.3.2
3.3.1
3.3
3.2.2
3.2.1
3.2
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.255.6
2.255.5
2.255.4
2.255.3
2.255.2
2.255.1
2.1.4
2.255.0
2.1.3
2.1.2
2.1.1
2.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.255.11
1.255.10
1.255.9
1.0.39
1.255.8
1.255.7
1.255.6
1.255.5
1.0.38
1.255.4
1.0.37
1.255.3
1.255.2
1.255.1
1.255.0
1.0.36
1.0.34
1.0.35
1.0.33
1.0.32
1.0.31
1.0.30
1.0.29
1.0.28
1.0.27
1.0.26
1.0.25
1.0.24
1.0.23
1.0.22
1.0.21
1.0.20
1.0.19
1.0.18
1.0.17
1.0.16
audit/2017-12
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0-alpha8
1.0-alpha6
1.0-alpha5
1.0-alpha4a
1.0-alpha3
1.0-alpha2a
1.0-alpha1
1.0-alpha
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/windows#128
Reference in a new issue
eduVPN/windows
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?