Re: How can I deny VPN access based on Virus DAT

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2006-01-03 Nick Duda wrote:
> Can anyone explain the different products and/or procedures in using a
> VPN device for telecommuters with the ability to deny VPN access if
> they dona?Tt have Antivirus or their Antivirus DAT's are not up to
> date.

How are you going to verify that without already establishing the VPN?
Do you want to rely on the client telling you "yep, ev'rything's just
fine"? Why would $MALWARE refrain from forging that claim?

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------