Trying to deploy a DAP on a Cisco ASA that checks user's device has firewall enabled.
Problem happens when anything other then Windows Firewall is used. As 3rd party firewall is enabled but it will show Windows Firewall as disabled and then fail.
This is the EVAL
assert(function()
for k,v in pairs(endpoint.pfw) do
if (EVAL(v.enabled, "EQ", "failed", "string")) then
return true
end
end
return false
end)()
This is the debug output from ASA, as expected ESET in this case is enabled and Windows Firewall is disabled as it should be
Sep 29 12:36:30 EDT: %ASA-dap-7-734003: DAP: User peter.alliett@X.X.X.X, Addr 1.2.3.4: Session Attribute endpoint.pfw["2675"].description="ESET Internet Security"
Sep 29 12:36:30 EDT: %ASA-dap-7-734003: DAP: User peter.alliett@X.X.X.X, Addr 1.2.3.4: Session Attribute endpoint.pfw["2675"].enabled="ok"
Sep 29 12:36:30 EDT: %ASA-dap-7-734003: DAP: User peter.alliett@XXX, Addr 1.2.3.4: Session Attribute endpoint.pfw["283"].description="Windows Firewall"
Sep 29 12:36:30 EDT: %ASA-dap-7-734003: DAP: User peter.alliett@XXX, Addr 1.2.3.4: Session Attribute endpoint.pfw["283"].enabled="failed"