VISULOX 4 Documentation

How to control applications from the command line


Overview

The command line tool "VISULOX policy application" allows to control the Application Policy.


Usage


The following subcommands are available:

Command

Description

list

List and print Application Policies.

add

Add an Application Policy.

edit

Modify fields of an Application Policy.

delete

Remove an Application Policy.

fields

List available fields in the database (-raw = enhanced output)

Application Policy elements (edit)


Element

Description

-name <>

Name of policy or use AUTO

-mode <>

Policy on or off. Default value: on.

-object <>

Policy filter: mask or unique distinguished object of user or group <>

-applicationgroup <>

Policy filter: mask or applicationgroup name or applicationgroup mask <>

-application <>

Policy filter: mask or application name or application mask <>

-remoteip <>

Policy filter: remote IP or remote IP mask <>

-accesspoint <>

Policy filter: Access Point <>

-script <>

Trigger script. Usage: -script "<script-name>: args". Example with arguments: -script "Dump: -arg arg -arg1 <>"

-recording <>

Mandatory. In comparison to the GUI no field validation is done.

-lifetime <>

Lifetime of recorder data <>

-welcome <>

Recording welcome message <>

-ksmode <>

KW mode: off / detect / record. Default value: off

-ksscript <>

Trigger script on detection <>

-ksaction <>

Action on detection: mute / info / lock. Default value: mute

-ksmessage <>

Message to user on detection <>

-ksrules <>

File with keystroke rules <>

-ocrmode <>

OCR mode off / detect / record. Default value:  off.

-ocrargs <>

OCR API arguments <>

-dcmode <>

Dual Control on or off. Default value: off.

-dcmembers <>

Dual Control members. Default value: 1.

-dctimer <>

Dual Control timer. Default value: 30.

-dcobject <>

Dual Control filter: mask or unique distinguished object of user or group <>

-dcremoteip <>

Dual Control filter: mask or remote IP or remote IP mask <>

-dcaccesspoint <>

Dual Control filter: Access Point <>

-comment <>

Comment for the policy. Default value: CLI.

-grant <>

Set granted user in database record <>

Examples


visulox policy application list
    --------------------------
    | basicname | policymode |
    --------------------------
    |      APP1 | active.map |
    --------------------------


visulox policy application fields


visulox policy application list -fields basicname,policymode,app_script


visulox policy application add -name APP1 -application "xterm\,xclock" -recording on


visulox policy application edit -name APP1 -lifetime 3


visulox policy application edit -name APP1 -ksmode record -ksrules /tmp/ks_rules -ksscript Dump


visulox policy application delete -name APP1