File check

The File Check device posture attribute checks for the presence of a file on a device. You can create multiple file checks for each operating system you need to run it on, or if you need to check for multiple files.

Prerequisites

• Cloudflare WARP client is deployed on the device. For a list of supported modes and operating systems, refer to WARP Client Checks.

Configure a file check

1. In Zero Trust, go to Settings > WARP Client.

2. Scroll down to WARP client checks and select Add new.

3. Select File Check.

4. You will be prompted for the following information:

   1. Name: Enter a unique name for this device posture check.
   2. Operating system: Select your operating system.
   3. File Path: Enter a file path (for example, c:\my folder\myfile.exe).
   4. Signing certificate thumbprint (recommended): Enter the thumbprint of the publishing certificate used to sign the file. Adding this information will enable the check to ensure that the file was signed by the expected software developer.
   5. SHA-256 (optional): Enter the SHA-256 value of the file. This is used to ensure the integrity of the file on the device.

5. Select Save.

Next, go to Logs > Posture and verify that the file check is returning the expected results.