Cisco NAC rules attributes

Name	Type	Description
AVSoftwareInstalled	paramParams	The security application is installed or not: check paramBool Rule checked operation paramInt Compare operation, see below
AVSoftwareRunning	paramParams	The security application is running or not: check paramBool Rule checked operation paramInt Compare operation, see below
BasesDate	paramParams	The application databases updated or not: check paramBool Rule checked operation paramInt Compare operation, see below value paramInt Days count
HasRTP	paramParams	The real-time protection is enabled or not: check paramBool Rule checked operation paramInt Compare operation, see below
LastConnectedDate	paramParams	The device connected to the Administration for some time: check paramBool Rule checked operation paramInt Compare operation, see below value paramInt Days count
LastFScanDate	paramParams	The full scan of the device is performed for a some time: check paramBool Rule checked operation paramInt Compare operation, see below value paramInt Days count
RTPState	paramParams	The real-time protection level is same as that set by Administrator: check paramBool Rule checked operation paramInt Compare operation, see below value paramInt RTP mask: 0x00010000 - Stopped 0x00020000 - Suspended 0x00040000 - Starting 0x00080000 - Running 0x00100000 - Running_MaxProtection 0x00200000 - Running_MaxSpeed 0x00400000 - Running_Recomended 0x00800000 - Running_Custom 0x01000000 - Failure

Compare operation:

• 0 - Equal
• 1 - Not equal
• 2 - Less
• 3 - Less or equal
• 4 - Greater
• 5 - Greater or equal
• 6 - In
• 7 - Not in

See also:

Section CISCO_NAC attributes