DUO Auth Proxy

Summary

The objective of this monitor is to identify computers with older versions of the DUO Authentication Proxy application installed.

Suggested "Limit to": Windows
Suggested Alert Style: Once
Suggested Alert Template: △ Custom - Update - DUO Auth Proxy

Insert the details of the monitor in the table below.

Check Action	Server Address	Check Type	Execute Info	Comparator	Interval	Result
System	127.0.0.1	Run File	C:/Windows/System32/WindowsPowerShell/v1.0/powershell.exe -ExecutionPolicy Bypass -Command "$ProgressPreference = 'SilentlyContinue'; $ErrorActionPreference = 'SilentlyContinue'; $File = (Invoke-WebRequest -uri https://dl.duosecurity.com/duoauthproxy-latest.exe -UseBasicParsing -Method Head).Headers.'Content-Disposition'; [Version]$Latest = ($File -replace '.*duoauthproxy-', '' -replace '//.exe.$', ''); [Version]$Current = (Get-ChildItem -Path HKLM:/SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall, HKLM:/SOFTWARE/Wow6432Node/Microsoft/Windows/CurrentVersion/Uninstall	Get-ItemProperty	Where-Object { $_.DisplayName -match 'Duo Security Authentication Proxy' }).DisplayVersion; if ([Version]$Latest -gt [Version]$Current) { return """$($Latest)""" }"	Regex

Group of Windows machines having the 'DUO Security Authentication Proxy' application installed.