exists file ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe" ) whose ( version ofit >= "7"as version AND version ofit < "7.0.9.164"as version )
exists file(value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe") whose (version ofit >= "7"as version AND version ofit < "7.0.9.164"as version)
exists folder ( value "CommonFilesDir"of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion"of registry as string ) whose ( version of file "InstallShield\Professional\RunTime\objectps.dll"ofit <= version "11.0.0.28844" )
exists folder (value "CommonFilesDir"of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion"of registry as string) whose (version of file "InstallShield\Professional\RunTime\objectps.dll"ofit <= version "11.0.0.28844")
exists file ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe" ) whose ( version ofit >= "7"as version AND version ofit < "7.1.8.13"as version )
exists file(value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe") whose (version ofit >= "7"as version AND version ofit < "7.1.8.13"as version)
exists file ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe" ) whose ( version ofit >= "6"as version AND version ofit < "6.0.28.4"as version )
exists file(value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe") whose (version ofit >= "6"as version AND version ofit < "6.0.28.4"as version)
NOT ( ( version of regapp "iexplore.exe" >= "7" ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry ) AND ( exists folder "macromed\flash"whose ( exists file whose ( ( ( itstartswith"flash"ANDit ends with".ocx" ) OR ( it="swflash.ocx" ) ) of ( name ofitas lowercase ) AND version ofit >= "9" ) ofit ) of system folder ) AND ( exists key ( "HKEY_USERS\" & ( ( ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & ( first match ( regex "^[^:]+" ) of first match ( regex "[^/]+$" ) of ( itas string ) ) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry ) whose ( exists value "http"whose ( it=2 ) ofitANDexists value "https"whose ( it=2 ) ofit ) of registry ) AND ( exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose ( ( ( exists value "PDFEnable"whose ( it="1" ) ofit ) OR ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) ) AND value "PDFPostScriptPath"ofit= ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) AND value "PDFPrinterName"ofit="BES Web Reports Printer" ) of registry ) AND ( exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ( ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose ( exists value "UninstallString"ofit ) of registry ) AND ( ( itcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\bin"ANDitcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\lib" ) of ( value "Path"ofitas string ) ) ) of registry ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) AND ( exists key ( "HKU\" & ( ( ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Internet Explorer\PageSetup" ) of registry ) )
NOT ((version of regapp "iexplore.exe" >= "7") AND (exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry) AND (exists folder "macromed\flash"whose (exists file whose (((itstartswith"flash"ANDit ends with".ocx") OR (it="swflash.ocx")) of (name ofitas lowercase) AND version ofit >= "9") ofit) of system folder) AND (exists key ("HKEY_USERS\" & ((ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & (first match (regex "^[^:]+") of first match (regex "[^/]+$") of (itas string)) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry) whose (exists value "http"whose (it=2) ofitANDexists value "https"whose (it=2) ofit) of registry) AND (exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose (((exists value "PDFEnable"whose (it="1") ofit) OR (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry)) AND value "PDFPostScriptPath"ofit= (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") AND value "PDFPrinterName"ofit="BES Web Reports Printer") of registry) AND (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ((exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose (exists value "UninstallString"ofit) of registry) AND ((itcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\bin"ANDitcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\lib") of (value "Path"ofitas string))) of registry) AND (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry) AND (exists key ("HKU\" & ((ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Internet Explorer\PageSetup") of registry))
if ( version of regapp "iexplore.exe" < "7" ) then ( ( ( itcontains"English"OR ( itcontains"Turkish"ANDNOT x64 of operating system ) ORitcontains"Italian"OR ( itcontains"Hungarian"ANDNOT x64 of operating system ) ORitcontains"Spanish"OR ( itcontains"Polish"ANDNOT x64 of operating system ) OR ( itcontains"Dutch"ANDNOT x64 of operating system ) ORitcontains"Korean"ORitcontains"French"ORitcontains"German"ORitcontains"Japanese"OR ( itcontains"Czech"ANDNOT x64 of operating system ) ) of language of version block of file "kernel32.dll"of system folder ) OR ( exists key "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages"whose ( exists value ofit ) of registry ) ) else ( true )
if (version of regapp "iexplore.exe" < "7") then (((itcontains"English"OR (itcontains"Turkish"ANDNOT x64 of operating system) ORitcontains"Italian"OR (itcontains"Hungarian"ANDNOT x64 of operating system) ORitcontains"Spanish"OR (itcontains"Polish"ANDNOT x64 of operating system) OR (itcontains"Dutch"ANDNOT x64 of operating system) ORitcontains"Korean"ORitcontains"French"ORitcontains"German"ORitcontains"Japanese"OR (itcontains"Czech"ANDNOT x64 of operating system)) of language of version block of file "kernel32.dll"of system folder) OR (exists key "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages"whose (exists value ofit) of registry)) else (true)
( ( version of regapp "iexplore.exe" >= "7" ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry ) AND ( exists folder "macromed\flash"whose ( exists file whose ( ( ( itstartswith"flash"ANDit ends with".ocx" ) OR ( it="swflash.ocx" ) ) of ( name ofitas lowercase ) AND version ofit >= "9" ) ofit ) of system folder ) AND ( exists key ( "HKEY_USERS\" & ( ( if ( it="LocalSystem" ) then ( "S-1-5-18" ) elseif ( it="LocalService" ) then ( "S-1-5-19" ) elseif ( it="NetworkService" ) then ( "S-1-5-20" ) elseif ( itcontains"@" ) then ( component string of sid of security account ( it ) ) else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & ( first match ( regex "^[^:]+" ) of first match ( regex "[^/]+$" ) of ( itas string ) ) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry ) whose ( exists value "http"whose ( it=2 ) ofitANDexists value "https"whose ( it=2 ) ofit ) of registry ) AND ( exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose ( ( ( exists value "PDFEnable"whose ( it="1" ) ofit ) OR ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) ) AND value "PDFPostScriptPath"ofit= ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) AND value "PDFPrinterName"ofit="BES Web Reports Printer" ) of registry ) AND ( exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ( ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose ( exists value "UninstallString"ofit ) of registry ) AND ( ( itcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\bin"ANDitcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\lib" ) of ( value "Path"ofitas string ) ) ) of registry ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) AND ( exists key ( "HKU\" & ( ( if ( it="LocalSystem" ) then ( "S-1-5-18" ) elseif ( it="LocalService" ) then ( "S-1-5-19" ) elseif ( it="NetworkService" ) then ( "S-1-5-20" ) elseif ( itcontains"@" ) then ( component string of sid of security account ( it ) ) else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Internet Explorer\PageSetup" ) of registry ) )
((version of regapp "iexplore.exe" >= "7") AND (exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry) AND (exists folder "macromed\flash"whose (exists file whose (((itstartswith"flash"ANDit ends with".ocx") OR (it="swflash.ocx")) of (name ofitas lowercase) AND version ofit >= "9") ofit) of system folder) AND (exists key ("HKEY_USERS\" & ((if (it="LocalSystem") then ("S-1-5-18") elseif (it="LocalService") then ("S-1-5-19") elseif (it="NetworkService") then ("S-1-5-20") elseif (itcontains"@") then (component string of sid of security account (it)) else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & (first match (regex "^[^:]+") of first match (regex "[^/]+$") of (itas string)) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry) whose (exists value "http"whose (it=2) ofitANDexists value "https"whose (it=2) ofit) of registry) AND (exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose (((exists value "PDFEnable"whose (it="1") ofit) OR (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry)) AND value "PDFPostScriptPath"ofit= (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") AND value "PDFPrinterName"ofit="BES Web Reports Printer") of registry) AND (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ((exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose (exists value "UninstallString"ofit) of registry) AND ((itcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\bin"ANDitcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\lib") of (value "Path"ofitas string))) of registry) AND (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry) AND (exists key ("HKU\" & ((if (it="LocalSystem") then ("S-1-5-18") elseif (it="LocalService") then ("S-1-5-19") elseif (it="NetworkService") then ("S-1-5-20") elseif (itcontains"@") then (component string of sid of security account (it)) else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Internet Explorer\PageSetup") of registry))
( ( itstartswith"Win" ) OR ( itstartswith"AIX" ) OR ( itstartswith"HP-UX" ) OR ( itstartswith"Mac OS X" ) OR ( itstartswith"VMWare" ) OR ( itstartswith"SunOS" ) OR ( itstartswith"Linux" ) ) of name of operating system
((itstartswith"Win") OR (itstartswith"AIX") OR (itstartswith"HP-UX") OR (itstartswith"Mac OS X") OR (itstartswith"VMWare") OR (itstartswith"SunOS") OR (itstartswith"Linux")) of name of operating system
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5" ) ofitorexists match ( regex "Fedora Core release (3|4|5|6|7)" ) ofitorexists match ( regex "Fedora release (3|4|5|6|7)" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitorexists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5") ofitorexists match (regex "Fedora Core release (3|4|5|6|7)") ofitorexists match (regex "Fedora release (3|4|5|6|7)") ofit) ofit)
exists file ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe" ) whose ( version ofit >= "7"as version AND version ofit < "7.2.5.22"as version )
exists file(value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe") whose (version ofit >= "7"as version AND version ofit < "7.2.5.22"as version)
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux AS release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux Server release 5" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux AS release 4") ofitorexists match (regex "Red Hat Enterprise Linux Server release 5") ofit) ofit)
( ( exists file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe"AND version of file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe" >= "2.0.4.24" ) OR ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry AND value "Version"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string as version >= "2.0.4.24"ANDexists file "filldb.exe"of ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder ) ) )
((exists file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe"AND version of file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe" >= "2.0.4.24") OR (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry AND value "Version"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string as version >= "2.0.4.24"ANDexists file "filldb.exe"of (value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder)))
( ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose ( value "Version"ofitas string as version < "6.0" ) of registry ) AND ( exists file "filldb.exe"of ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder ) ) )
((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose (value "Version"ofitas string as version < "6.0") of registry) AND (exists file "filldb.exe"of (value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder)))
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp AND enabled ofit ) ofitANDnotexists authorized application whose ( process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit ) ofit ) of current profile of local policy of firewall ANDexists internet connection firewall whose ( enabled ofitANDnotexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp AND enabled ofit) ofitANDnotexists authorized application whose (process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit) ofit) of current profile of local policy of firewall ANDexists internet connection firewall whose (enabled ofitANDnotexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network)
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= tcp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besrelay.exe"ORit ends with"filldb.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) ) OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besclient.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= tcp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besrelay.exe"ORit ends with"filldb.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall)) OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besclient.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall))
( ( ( sum of sizes of files of folders of folders ofit ) + ( sum of sizes of files ofit ) ) of folder "sha1"of folder ( if ( ( exists setting "_BESRelay_UploadManager_BufferDirectory"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectory"ofit ) of client ) then ( value of setting "_BESRelay_UploadManager_BufferDirectory"of client as string ) else ( if ( name of operating system startswith"Win" ) then ( parent folder of parent folder of client as string & "\BES Relay\UploadManagerData\BufferDir" ) else ( "/var/opt/BESRelay/UploadManagerData/BufferDir" ) ) ) >= it ) of ( if ( ( exists setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofit ) of client ) then ( value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"of client as integer ) else ( 20971520 ) )
(((sum of sizes of files of folders of folders ofit) + (sum of sizes of files ofit)) of folder "sha1"of folder (if ((exists setting "_BESRelay_UploadManager_BufferDirectory"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectory"ofit) of client) then (value of setting "_BESRelay_UploadManager_BufferDirectory"of client as string) else (if (name of operating system startswith"Win") then (parent folder of parent folder of client as string & "\BES Relay\UploadManagerData\BufferDir") else ("/var/opt/BESRelay/UploadManagerData/BufferDir"))) >= it) of (if ((exists setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofit) of client) then (value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"of client as integer) else (20971520))