Updated Date: 07/07/2026
About Client-Side Capability
Note: Starting from the APM Clients release 7.1.5, the APM Clients do not use browser plugins. So, the Client-Side Capability agent should not be used to determine if a client is capable of running the client-side endpoint security checks or of establishing VPN, Dynamic or Static Application tunnels.
The Client-Side Capability action determines whether the client is fully capable of running endpoint security (client-side) actions. The Client-Side Capability action includes two branches.
| Branch | Description |
|---|---|
| Full | Indicates that the user is connecting with a client that has full client-side check support. |
| fallback | Indicates that the user is connecting with a client that does not fully support client-side checks. |
This action can be very useful as one of the first checks in an access policy. The Full branch can include the required client-side checks for those clients that are capable, while the fallback branch can lead to access policy branches for other clients.
This figure shows an example in which the Client-Side Capability action is used to verify that the client is capable of running a client-side check before running the client-side check for antivirus software.
Note: In practice, an access policy would usually include a logon action, an authentication action, and other actions.