IBM Tivoli and Cisco - Manual (Page 267)

Chapter 7. Network enforcement subsystem implementation 249
7. From the Attribute drop-down list (Figure 7-31), select Cisco:PA:PA-Version.
The operator value should be set to >= and the value set to 2.0.0.0. This
simply means that we are setting up a check for the Cisco Trust Agent to be
present on the endpoint, and that it must be running version 2.0.0.0 or later.
Click Enter when this is done, and then Submit.
Figure 7-31 Adding a condition set