1. A method of installing a pipe coupling onto pipes and fittings, comprising the steps of:
providing a tool having a handle; a knife portion extending from the handle, the knife portion having a tip end, the tip end having a first thread engaging edge, and a second thread engaging edge;
placing the pipe coupling onto the pipes and fittings, the pipe coupling having a first set of flanges and a second set of flanges, each set of flanges having an aperture therethrough for receiving a bolt;
installing a first bolt having a threaded end into the aperture on the first set of flanges and loosely connecting a first nut onto the threaded end of the first bolt;
squeezing the second set of flanges of the pipe coupling together;
inserting a second bolt having a threaded end into the aperture on the second set of flanges,
wedging the tip end of the tool against the threaded end of the second bolt such that the first thread engaging edge and the second thread engaging edge engage the threads of the second bolt;
releasing the second set of flanges thereby preventing the pipe coupling from springing open and the second bolt from coming out of the aperture on the second set of flanges;
fastening the first nut on the first bolt; and
fastening a second nut on the second bolt.
2. The method of claim 1, further comprising the step of:
removing the tool from the second bolt.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for authorizing a level of access of a client to a virtual private network connection, based on an attribute of a client-side computing environment, the method comprising the steps of:
(a) establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network;
(b) transmitting, by the appliance via the control connection to the client, a request for an evaluation component executing on the client to evaluate a security string transmitted in the request, the security string comprising one or more expressions including (i) an identifier of an attribute of a client-side computing environment, and (ii) a logical operation on a value of the attribute, a result of which comprises a value that determines what level of access to grant to the client;
(c) transmitting, by the client via the control connection, a response to the appliance comprising the result of evaluating the one or more expressions of the security string by the evaluation component; and
(d) assigning, by the appliance, a level of access to the client responsive to an application of a policy by a policy engine to the result of the evaluation; and
(e) establishing, by the appliance, the virtual private network connection with the client in accordance with the assigned level of access.
2. The method of claim 1, wherein step (b) further comprises transmitting the request to a collection agent on the client, the collection agent gathering information associated with the identified attribute and evaluating the at least one clause.
3. The method of claim 1, wherein step (c) further comprises executing, by the client, a script to evaluate the security string.
4. The method of claim 1, wherein step (c) further comprises gathering, by the client, information associated with the identified attribute.
5. The method of claim 4, wherein step (c) further comprises evaluating the one or more expressions responsive to the gathered information.
6. The method of claim 1, wherein step (c) further comprises identifying, by the client responsive to evaluating the at least one clause, a presence on the client of one of the following: a version of an operating system, a service pack of the operating system, a running service, a running process, and a file.
7. The method of claim 1, wherein step (c) further comprises identifying, by the client, responsive to evaluating the at least one clause, a presence on the client of one of the following: antivirus software, personal firewall software, anti-spam software, and internet security software.
8. The method of claim 1, wherein step (c) further comprises identifying, by the client, responsive to evaluating the one or more expressions, a version of one of the following: antivirus software, personal firewall software, anti-spam software, and internet security software.
9. The method of claim 1, wherein step (c) further comprises evaluating, by the appliance, an expression of the one or more expression responsive to identifying that the attribute is present in the client.
10. The method of claim 1, wherein step (c) further comprises receiving, by the appliance, gathered information associated with the client.
11. The method of claim 10, wherein step (c) further comprises receiving, by the appliance, the gathered information from a collection agent.
12. The method of claim 10, wherein step (c) further comprises evaluating the one or more expressions of the security string responsive to the gathered information.
13. The method of claim 12, wherein step (c) further comprises evaluating, by the appliance, the security string comprising one or more logical operations.
14. The method of claim 1, wherein step (d) further comprises determining, by the appliance, responsive to the value of the result, that the client lacks the identified attribute.
15. The method of claim 14, wherein step (d) further comprises assigning, by the appliance, the client to the level of access, the level of access providing quarantined access to the network via the appliance.
16. The method of claim 1, wherein step (d) further comprises configuring, via the appliance, an authorization policy comprising the security string.
17. The method of claim 16, wherein step (d) further comprises assigning via the appliance the authorization policy to a level of access or an authorization group.
18. The method of claim 1, wherein step (d) further comprises denying, by the appliance, a login request from a client if the security string is not associated with a level of access or an authorization group.
19. The method of claim 1, wherein step (d) further comprises transmitting, by the appliance, to the policy engine, the response comprising the result of the evaluation.
20. A system for authorizing a level of access of a client to a virtual private network connection, based on an attribute of a client-side computing environment, the system comprising:
a means for transmitting, by a client, a request to an appliance for a virtual private network connection to a network;
a request received by the client, via a control connection between the client and the appliance, for evaluation of a security string transmitted in the request, the security string comprising one or more expressions including (i) an identifier of an attribute of a client-side computing environment, and (ii) a logical operation on a value of the attribute, a result of which comprises a value that determines what level of access to grant to the client;
an evaluation component, executing on the client, for evaluating the one or more expressions;
a means for transmitting, by the client via the control connection, a response comprising the result of the evaluation by the evaluation component; and
a means for receiving, from the appliance, an assignment of a level of access to the client responsive to an application of a policy by a policy engine to the result of the evaluation, the appliance establishing the virtual private network connection with the client in accordance with the assigned level of access.
21. The system of claim 20, wherein the security string identifies the client as an object for evaluation.
22. The system of claim 20, wherein the one or more expressions identifies a presence of an application program as an attribute.
23. The system of claim 20, wherein the one or more expressions identifies an absence of an application program as an attribute.
24. The system of claim 20, wherein the one or more expressions identifies a presence of a version of an application program as an attribute.
25. The system of claim 20, wherein the one or more expressions identifies an absence of a version of an application program as an attribute.
26. The system of claim 20, wherein the one or more expressions identifies a presence of a required version of an application program as an attribute.
27. The system of claim 20, wherein the one or more expressions identifies a presence of at least a minimum version of an application program as an attribute.
28. The system of claim 20, wherein the one or more expressions identifies an absence of at least a minimum version of an application program as an attribute.
29. The system of claim 20, wherein the evaluation component further comprises a script for evaluating the one or more expressions.
30. The system of claim 20, wherein the evaluation component is transmitted to the client from the appliance.
31. The system of claim 20, wherein the evaluation component further comprises a collection agent gathering information associated with the identified attribute.
32. The system of claim 31, wherein the evaluation component evaluates the one or more expressions responsive to the gathered information.
33. The system of claim 20, wherein the evaluation component identifies an attribute indicating a presence on the client of one of the following: a version of an operating system, a service pack of the operating system, a running service, a running process, and a file.
34. The system of claim 20, wherein the evaluation component identifies an attribute indicating a presence on the client of one of the following: antivirus software, personal firewall software, anti-spam software, and internet security software.
35. The system of claim 20, wherein the evaluation component identifies an attribute indicating a presence on the client of a version of one of the following: antivirus software, personal firewall software, anti-spam software, and internet security software.
36. The system of claim 20, wherein the evaluation component determines that the identified attribute satisfies a pre-requisite included in the security string.
37. The system of claim 20, wherein the means for receiving further comprises a means for receiving an assignment made responsive to the result of evaluation of a second clause by the appliance.
38. The system of claim 20, wherein the means for receiving further comprises a means for receiving an assignment made responsive to a determination by the appliance that the client lacks a desired attribute.
39. The system of claim 38, wherein the means for receiving further comprises a means for receiving an assignment to the level of access, the level of access providing quarantined access to the network via the appliance.
40. The system of claim 20, wherein the means for receiving further comprises a means for receiving a denial, by the appliance, of the client request if the security string is not associated with an authorization group or a level of access.
41. The system of claim 20, wherein the means for receiving further comprises a means for receiving a denial, by the appliance, of the client request if a pre-requisite in the security string is not satisfied.
42. The system of claim 20, wherein the means for receiving further comprises a means for receiving an assignment made responsive to an evaluation, by the appliance, of another expression of the security string comprising one or more logical operations.