Introduction

The Citrix® Endpoint Analysis Software Development Kit (Endpoint Analysis SDK) for Advanced Access Control is an add-in for Microsoft Visual Studio .NET 2005 that provides instructions for developing and testing C++ and VBScript endpoint analysis scan packages.

This document contains the following sections:

• What is Included in this SDK?
• Who Should Use this SDK?
• Getting Support
• Requirements
• Installing the Endpoint Analysis SDK
• Known Issues in this Release
• Issues Fixed in the Release

Download Citrix Endpoint Analysis SDK Version 4.5.3

What is included in this SDK?

The Endpoint Analysis SDK for Microsoft Visual Studio .NET has the following components:

• Endpoint Analysis SDK, an add-in for Microsoft Visual Studio .NET 2005 that you use to write and modify .NET and script endpoint analysis scan packages.
• Endpoint Analysis SDK Online Help, which contains online instructions for using the Endpoint Analysis SDK.
• API Quick Reference, which contains information about objects and interfaces associated with this SDK.
• A set of sample scan packages that illustrate how the SDK might be used to create packages that check for certain client features. These can be found in the Samples folder of your install directory.
• Support for the Windows Vista operating system. In order to successfully run the scan packages created and configured for the Endpoint Analysis Client, Hotfix AAC450W003 must be installed.

Who Should Use this SDK?

The Endpoint Analysis SDK is for developers who want to create scan packages that perform a flexible range of security, identity, and device integrity checks on client devices before granting them access to a server running Access Gateway Advanced Edition. The documentation included in this release assumes developers are familiar with using the previous version of the Endpoint Analysis SDK and with Microsoft Visual Studio .NET. Developers who are new to creating scan packages are encouraged to use the sample packages included with the Advanced Access Control software without modification or evaluate other content delivery mechanisms.

Getting Support

Citrix provides technical support primarily through Citrix Solutions Network. Contact your supplier for first-line support or use Citrix Online Technical Support to find the nearest Citrix Solutions Advisor.

Citrix offers online technical support services on the Citrix Support Web site . The Support page includes links to the Citrix Knowledge Center, Citrix Consulting Services, and other useful support pages.

Requirements

To run the Citrix Endpoint Analysis SDK for Microsoft Visual Studio .NET, you must have Microsoft Visual Studio .NET 2005 installed. This version of the Endpoint Analysis SDK may not function correctly with previous versions of Microsoft Visual Studio.

Installing the Endpoint Analysis SDK

To install the Endpoint Analysis SDK, run the EndpointAnalysisSDK.msi file located in the \Setup\EPASDK folder on the Access Gateway Advanced Edition Server CD.

Note: If you copy the Endpoint Analysis Client supplied with this update to a location other than the default location specified in the makefile, you must update the location in the makefile file.

Important: Citrix strongly recommends that you maintain a separate development environment to create, edit, debug, and test any endpoint analysis packages. Move the package solution to the production environment only when you are sure they are ready for deployment.

To uninstall the Endpoint Analysis SDK, use Add/Remove Programs in Control Panel. To ensure all components have been removed, restart the computer.

Known issues and Limitations in This Release

This section describes the issues and limitations affecting Endpoint Analysis development. Read it carefully before installing the product.

Live Edit and Endpoint Analysis clients do not work in Windows Vista
When users are logged on as administrators and user access control is enabled in Windows Vista, the Live Edit and Endpoint Analysis clients do not work.

[From AACE450W003][#25364]

Migrating scan packages used in earlier versions of Advanced Access Control
If you have a custom scan package that was used with a version of Advanced Access Control earlier than 4.5, follow the instructions for migrating custom Endpoint Analysis scan packages in the Access Gateway Advanced Edition Upgrade Guide.

Replacing VBScript files does not update package manifest
Visual Studio does not notify the Endpoint Analysis SDK when an existing VBScript file is added to the project. This means the package manifest does not get updated with the new information.

To add an existing script file:

1. Create a new script file in the Scripts folder using the Add New Item dialog.
2. Replace this file in the file system with your existing script file.
3. Update the entry points for this code using the Package Properties dialog.

[#116967]

Listing MAC Address Groups
Currently, administrators must manually enter the target group name for the Citrix Scans for MAC Address endpoint analysis package. This can entail memorizing a large number of groups.

You can avoid this problem by developing programs that display group names as a list.

If the group list is too long for a drop-down menu, Citrix recommends that you create an application that provides a display of possible groups and conveys the user's selection to the CtxEpaParamUpdate tool to display the group list.

If the group list is small enough for a drop-down menu, Citrix recommends that you customize the endpoint analysis package by adding the group names.

To enter the group names as parameter values for a menu:

1. Extract the contents of the CitrixMACEnumeration.cab file.
2. Locate file package.xml and make a backup copy.
3. Open file package.xml in a text or XML editor. Replace the <values/> entry by inserting an explicit set of values as shown.

Original Code:

<parameter>
<externalname>GroupNameList</externalname>
<description>GNListDescription</description>
<internalname>GroupNameList</internalname>
<type>string</type>
<values/>
</parameter>

Replacement Code:

<parameter>
<externalname>GroupNameList</externalname>
<description>GNListDescription</description>
<internalname>GroupNameList</internalname>
<type>string</type>
<values>
<value>Group name first</value>
.
.
.
<value>Group name last</value>
</values>
</parameter>

1. Save file package.xml.
2. Rebuild the CitrixMACEnumeration.cab file, including the revised package.xml file.
3. Uninstall the Citrix Scans for MAC Address endpoint analysis package. Note :If you also change the package URI or version from those supplied (http://www.citrix.com/EndpointAnalysisPackages/CitrixMACEnumeration.cab and 1.0 respectively) you can install the new package alongside the original, enabling the new package to use the client code from the original. If you do this you must not uninstall the original package.
4. Reinstall the Citrix Scans for MAC Address endpoint analysis package using the revised CitrixMACEnumeration.cab file.

[#118639]

Creating a Solution with a new Visual Studio Installation
A solution created with a new installation of Visual Studio may not package properly. If this occurs, close and reopen Visual Studio.

[#149576]

Issues Fixed in this Release

Endpoint Analysis for Windows Firewall Does Not Work
The endpoint analysis for the Windows Firewall fails if Hotfix AACE450W001 or AACE450W002 is installed and users are not logged on as an administrator or part of an administrators group.

[From AACE450W003][#25158]

The following third-party applications are supported:

• McAfee VirusScan Enterprise 8.5.0.i
• McAfee Personal Firewall Plus 2008
• Checkpoint ZoneAlarm 7.0
• Checkpoint ZoneAlarm Pro 7.0
• McAfee Virus Scan Plus 2008
• Symantec Antivirus Enterprise 10.0
• Symantec Endpoint Protection 11.0
• TrendMicro Office Scan 8.0

[From AACE450W003][#24721, #25088, #25089, #25090, #25091, #25092, #25095, #25097]