Checking Remote User's Anti Virus and Windows Updates Status

[ontariomd]

Hi,

We have a ASA5520 with IPS module and I have set it up for IPSec VPN remote access. I was wondering if it is possible to check client PC's anti virus and windows updates to ensure it is reliable enough to connect to our network remotely using VPN client.

All I have found in configuration or documents is about personal firewall and how to use group policies to enforce them ... Any thing similar as pushing and/or verifying AV/Windows updates?

Thanks in advance ...

[thomas.chen]

Issue the show crypto ipsec sa command.

Identify your connection entry.

Check the encrypt and decrypt counters.

If you see no decrypts, there could be a firewall and or packet filter device blocking protocols 50 (ESP) or 51 (AH) between the client and the outside PIX interface.

If you see decrypts and no encrypts, there could be a routing issue on the PIX. Verify that there is a default route set on the PIX, and check the routing table on the PIX