DUO Auth Proxy
Summary
The objective of this monitor is to identify computers with older versions of the DUO Authentication Proxy application installed.
Details
Suggested "Limit to": Windows
Suggested Alert Style: Once
Suggested Alert Template: △ Custom - Update - DUO Auth Proxy
Insert the details of the monitor in the table below.
| Check Action | Server Address | Check Type | Execute Info | Comparator | Interval | Result |
|---|---|---|---|---|---|---|
| System | 127.0.0.1 | Run File | C:/Windows/System32/WindowsPowerShell/v1.0/powershell.exe -ExecutionPolicy Bypass -Command "$ProgressPreference = 'SilentlyContinue'; $ErrorActionPreference = 'SilentlyContinue'; $File = (Invoke-WebRequest -uri https://dl.duosecurity.com/duoauthproxy-latest.exe -UseBasicParsing -Method Head).Headers.'Content-Disposition'; [Version]$Latest = ($File -replace '.*duoauthproxy-', '' -replace '//.exe.$', ''); [Version]$Current = (Get-ChildItem -Path HKLM:/SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall, HKLM:/SOFTWARE/Wow6432Node/Microsoft/Windows/CurrentVersion/Uninstall | Get-ItemProperty | Where-Object { $_.DisplayName -match 'Duo Security Authentication Proxy' }).DisplayVersion; if ([Version]$Latest -gt [Version]$Current) { return """$($Latest)""" }" | Regex |
Target
- Group of Windows machines having the 'DUO Security Authentication Proxy' application installed.