Security

Can I use custom scripts for OnGuard health checks?

For example,  need to acomplish these two checks which are not available (AFAIK) in OnGuard: local group membership and is there a local share with read/write to everyone. I could write a script in Powershell to check it out and then return a value to OnGuard. 

Same question for Remediation.

https://www.arubanetworks.com/techdocs/ClearPass/6.6/PolicyManager/Content/CPPM_UserGuide/Enforce/Agent_Script_Enforcement.htm

Thank you for the gr8 reference! 

The info in this link is not sufficient. It tells how to create the Agent Script Enforcement Profile, but it does not say how to use this enf profile 

1.

What does this line mean?

"You can select multiple Agent Script Enforcement Profiles in a rule in an enforcement profile. OnGuard Agent executes them one after another."

Multiple enf profiles in another enf profile? Is it a typo and they mean multiple agent script enf profiles in an enf *POLICY*? 

2.

What is designating Success or Failure in thr script?  Std return codes of 0 or 1?

3. If it is indeed a new enf policy, should I add it to the current Webauth service. or shall I create a new WebAuth service?

Any info on the download URL would be great as well. How to excute the download etc.