NOT ( ( version of regapp "iexplore.exe" >= "7" ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry ) AND ( exists folder "macromed\flash"whose ( exists file whose ( ( ( itstartswith"flash"ANDit ends with".ocx" ) OR ( it="swflash.ocx" ) ) of ( name ofitas lowercase ) AND version ofit >= "9" ) ofit ) of system folder ) AND ( exists key ( "HKEY_USERS\" & ( ( ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & ( first match ( regex "^[^:]+" ) of first match ( regex "[^/]+$" ) of ( itas string ) ) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry ) whose ( exists value "http"whose ( it=2 ) ofitANDexists value "https"whose ( it=2 ) ofit ) of registry ) AND ( exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose ( ( ( exists value "PDFEnable"whose ( it="1" ) ofit ) OR ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) ) AND value "PDFPostScriptPath"ofit= ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) AND value "PDFPrinterName"ofit="BES Web Reports Printer" ) of registry ) AND ( exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ( ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose ( exists value "UninstallString"ofit ) of registry ) AND ( ( itcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\bin"ANDitcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\lib" ) of ( value "Path"ofitas string ) ) ) of registry ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) AND ( exists key ( "HKU\" & ( ( ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Internet Explorer\PageSetup" ) of registry ) )
NOT ((version of regapp "iexplore.exe" >= "7") AND (exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry) AND (exists folder "macromed\flash"whose (exists file whose (((itstartswith"flash"ANDit ends with".ocx") OR (it="swflash.ocx")) of (name ofitas lowercase) AND version ofit >= "9") ofit) of system folder) AND (exists key ("HKEY_USERS\" & ((ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & (first match (regex "^[^:]+") of first match (regex "[^/]+$") of (itas string)) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry) whose (exists value "http"whose (it=2) ofitANDexists value "https"whose (it=2) ofit) of registry) AND (exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose (((exists value "PDFEnable"whose (it="1") ofit) OR (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry)) AND value "PDFPostScriptPath"ofit= (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") AND value "PDFPrinterName"ofit="BES Web Reports Printer") of registry) AND (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ((exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose (exists value "UninstallString"ofit) of registry) AND ((itcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\bin"ANDitcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\lib") of (value "Path"ofitas string))) of registry) AND (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry) AND (exists key ("HKU\" & ((ifit="LocalSystem"then"S-1-5-18"elseifit="LocalService"then"S-1-5-19"elseifit="NetworkService"then"S-1-5-20"else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Internet Explorer\PageSetup") of registry))
if ( version of regapp "iexplore.exe" < "7" ) then ( ( ( itcontains"English"OR ( itcontains"Turkish"ANDNOT x64 of operating system ) ORitcontains"Italian"OR ( itcontains"Hungarian"ANDNOT x64 of operating system ) ORitcontains"Spanish"OR ( itcontains"Polish"ANDNOT x64 of operating system ) OR ( itcontains"Dutch"ANDNOT x64 of operating system ) ORitcontains"Korean"ORitcontains"French"ORitcontains"German"ORitcontains"Japanese"OR ( itcontains"Czech"ANDNOT x64 of operating system ) ) of language of version block of file "kernel32.dll"of system folder ) OR ( exists key "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages"whose ( exists value ofit ) of registry ) ) else ( true )
if (version of regapp "iexplore.exe" < "7") then (((itcontains"English"OR (itcontains"Turkish"ANDNOT x64 of operating system) ORitcontains"Italian"OR (itcontains"Hungarian"ANDNOT x64 of operating system) ORitcontains"Spanish"OR (itcontains"Polish"ANDNOT x64 of operating system) OR (itcontains"Dutch"ANDNOT x64 of operating system) ORitcontains"Korean"ORitcontains"French"ORitcontains"German"ORitcontains"Japanese"OR (itcontains"Czech"ANDNOT x64 of operating system)) of language of version block of file "kernel32.dll"of system folder) OR (exists key "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages"whose (exists value ofit) of registry)) else (true)
( ( version of regapp "iexplore.exe" >= "7" ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry ) AND ( exists folder "macromed\flash"whose ( exists file whose ( ( ( itstartswith"flash"ANDit ends with".ocx" ) OR ( it="swflash.ocx" ) ) of ( name ofitas lowercase ) AND version ofit >= "9" ) ofit ) of system folder ) AND ( exists key ( "HKEY_USERS\" & ( ( if ( it="LocalSystem" ) then ( "S-1-5-18" ) elseif ( it="LocalService" ) then ( "S-1-5-19" ) elseif ( it="NetworkService" ) then ( "S-1-5-20" ) elseif ( itcontains"@" ) then ( component string of sid of security account ( it ) ) else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & ( first match ( regex "^[^:]+" ) of first match ( regex "[^/]+$" ) of ( itas string ) ) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry ) whose ( exists value "http"whose ( it=2 ) ofitANDexists value "https"whose ( it=2 ) ofit ) of registry ) AND ( exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose ( ( ( exists value "PDFEnable"whose ( it="1" ) ofit ) OR ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) ) AND value "PDFPostScriptPath"ofit= ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) AND value "PDFPrinterName"ofit="BES Web Reports Printer" ) of registry ) AND ( exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ( ( exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose ( exists value "UninstallString"ofit ) of registry ) AND ( ( itcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\bin"ANDitcontains parenthesized part 1of ( first match ( regex "^(.*)uninstgs.exe" ) of ( value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string ) ) & "gs8.60\lib" ) of ( value "Path"ofitas string ) ) ) of registry ) AND ( exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose ( exists value ( ( ( value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry ) as string ) & "BESReportsData\ArchiveData\__pdf\out.ps" ) ofit ) of native registry ) AND ( exists key ( "HKU\" & ( ( if ( it="LocalSystem" ) then ( "S-1-5-18" ) elseif ( it="LocalService" ) then ( "S-1-5-19" ) elseif ( it="NetworkService" ) then ( "S-1-5-20" ) elseif ( itcontains"@" ) then ( component string of sid of security account ( it ) ) else ( string value of select ( ( "SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ( ( ifit="."then computer name elseit ) of preceding text of last "\"ofit ) & "'" ) of ( ( login account of service "BESWebReportsServer" ) as string ) ) of wmi ) ) of login account of service "BESWebReportsServer" ) & "\Software\Microsoft\Internet Explorer\PageSetup" ) of registry ) )
((version of regapp "iexplore.exe" >= "7") AND (exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry) AND (exists folder "macromed\flash"whose (exists file whose (((itstartswith"flash"ANDit ends with".ocx") OR (it="swflash.ocx")) of (name ofitas lowercase) AND version ofit >= "9") ofit) of system folder) AND (exists key ("HKEY_USERS\" & ((if (it="LocalSystem") then ("S-1-5-18") elseif (it="LocalService") then ("S-1-5-19") elseif (it="NetworkService") then ("S-1-5-20") elseif (itcontains"@") then (component string of sid of security account (it)) else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" & (first match (regex "^[^:]+") of first match (regex "[^/]+$") of (itas string)) of value "Hostname"of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\"of registry) whose (exists value "http"whose (it=2) ofitANDexists value "https"whose (it=2) ofit) of registry) AND (exists key "HKLM\Software\BigFix\Enterprise Server\BESReports"whose (((exists value "PDFEnable"whose (it="1") ofit) OR (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry)) AND value "PDFPostScriptPath"ofit= (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") AND value "PDFPrinterName"ofit="BES Web Reports Printer") of registry) AND (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment"whose ((exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"whose (exists value "UninstallString"ofit) of registry) AND ((itcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\bin"ANDitcontains parenthesized part 1of (first match (regex "^(.*)uninstgs.exe") of (value "UninstallString"of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60"of registry as string)) & "gs8.60\lib") of (value "Path"ofitas string))) of registry) AND (exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports"whose (exists value (((value "EnterpriseServerFolder"of key "HKLM\SOFTWARE\BigFix\Enterprise Server"of x32 registry) as string) & "BESReportsData\ArchiveData\__pdf\out.ps") ofit) of native registry) AND (exists key ("HKU\" & ((if (it="LocalSystem") then ("S-1-5-18") elseif (it="LocalService") then ("S-1-5-19") elseif (it="NetworkService") then ("S-1-5-20") elseif (itcontains"@") then (component string of sid of security account (it)) else (string value of select (("SID from Win32_UserAccount where NAME='" & following text of last "\"ofit & "' and DOMAIN='" & ((ifit="."then computer name elseit) of preceding text of last "\"ofit) & "'") of ((login account of service "BESWebReportsServer") as string)) of wmi)) of login account of service "BESWebReportsServer") & "\Software\Microsoft\Internet Explorer\PageSetup") of registry))
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5" ) ofitorexists match ( regex "Fedora Core release (3|4|5|6|7)" ) ofitorexists match ( regex "Fedora release (3|4|5|6|7)" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitorexists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5") ofitorexists match (regex "Fedora Core release (3|4|5|6|7)") ofitorexists match (regex "Fedora release (3|4|5|6|7)") ofit) ofit)
exists file ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe" ) whose ( version ofit >= "7"as version AND version ofit < "7.2.5.22"as version )
exists file(value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string & "BESWebReportsServer.exe") whose (version ofit >= "7"as version AND version ofit < "7.2.5.22"as version)
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux AS release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux Server release 5" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux AS release 4") ofitorexists match (regex "Red Hat Enterprise Linux Server release 5") ofit) ofit)
( ( exists file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe"AND version of file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe" >= "2.0.4.24" ) OR ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry AND value "Version"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string as version >= "2.0.4.24"ANDexists file "filldb.exe"of ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder ) ) )
((exists file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe"AND version of file "C:\BigFix\BigFixEnterpriseServer\FillDB.exe" >= "2.0.4.24") OR (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry AND value "Version"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as string as version >= "2.0.4.24"ANDexists file "filldb.exe"of (value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder)))
( ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose ( value "Version"ofitas string as version < "6.0" ) of registry ) AND ( exists file "filldb.exe"of ( value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder ) ) )
((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose (value "Version"ofitas string as version < "6.0") of registry) AND (exists file "filldb.exe"of (value "EnterpriseServerFolder"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"of registry as folder)))
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp AND enabled ofit ) ofitANDnotexists authorized application whose ( process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit ) ofit ) of current profile of local policy of firewall ANDexists internet connection firewall whose ( enabled ofitANDnotexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp AND enabled ofit) ofitANDnotexists authorized application whose (process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit) ofit) of current profile of local policy of firewall ANDexists internet connection firewall whose (enabled ofitANDnotexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network)
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= tcp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besrelay.exe"ORit ends with"filldb.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) ) OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besclient.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= tcp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besrelay.exe"ORit ends with"filldb.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall)) OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besclient.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall))
( ( ( sum of sizes of files of folders of folders ofit ) + ( sum of sizes of files ofit ) ) of folder "sha1"of folder ( if ( ( exists setting "_BESRelay_UploadManager_BufferDirectory"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectory"ofit ) of client ) then ( value of setting "_BESRelay_UploadManager_BufferDirectory"of client as string ) else ( if ( name of operating system startswith"Win" ) then ( parent folder of parent folder of client as string & "\BES Relay\UploadManagerData\BufferDir" ) else ( "/var/opt/BESRelay/UploadManagerData/BufferDir" ) ) ) >= it ) of ( if ( ( exists setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofit ) of client ) then ( value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"of client as integer ) else ( 20971520 ) )
(((sum of sizes of files of folders of folders ofit) + (sum of sizes of files ofit)) of folder "sha1"of folder (if ((exists setting "_BESRelay_UploadManager_BufferDirectory"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectory"ofit) of client) then (value of setting "_BESRelay_UploadManager_BufferDirectory"of client as string) else (if (name of operating system startswith"Win") then (parent folder of parent folder of client as string & "\BES Relay\UploadManagerData\BufferDir") else ("/var/opt/BESRelay/UploadManagerData/BufferDir"))) >= it) of (if ((exists setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofitandexists value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"ofit) of client) then (value of setting "_BESRelay_UploadManager_BufferDirectoryMaxSize"of client as integer) else (20971520))
exists file whose ( name ofitas string ="rmdir.bat"OR name ofitas string ="client.bat" ) of folder ( pathname of client folder of site "bessupport" ) ORexists folder "__besdiag"of folder ( pathname of client folder of site "bessupport" )
exists file whose (name ofitas string ="rmdir.bat"OR name ofitas string ="client.bat") of folder (pathname of client folder of site "bessupport") ORexists folder "__besdiag"of folder (pathname of client folder of site "bessupport")
( ( language of version block of file "kernel32.dll"of system folder does not contain "English" ) AND ( notexists values of keys "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages"of registry ) )
((language of version block of file "kernel32.dll"of system folder does not contain "English") AND (notexists values of keys "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages"of registry))
( free space of drive ( first 2of ( value "value"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath"of x32 registry as string ) ) + ( sum of ( sizes of files of folders of folder ( ( if ( value of setting "_BESRelay_HTTPServer_ServerRootPath"of client ) ends with"\"then ( ( value of setting "_BESRelay_HTTPServer_ServerRootPath"of client ) & "bfmirror\downloads" ) else ( ( value of setting "_BESRelay_HTTPServer_ServerRootPath"of client ) & "\bfmirror\downloads" ) ) ) ) ) ) <free space of drive whose ( type ofit="DRIVE_FIXED"AND free space ofit= maximum of ( free spaces of drives whose ( type ofit="DRIVE_FIXED" ) ) )
(free space of drive (first 2of (value "value"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath"of x32 registry as string)) + (sum of (sizes of files of folders of folder ((if(value of setting "_BESRelay_HTTPServer_ServerRootPath"of client) ends with"\"then ((value of setting "_BESRelay_HTTPServer_ServerRootPath"of client) & "bfmirror\downloads") else ((value of setting "_BESRelay_HTTPServer_ServerRootPath"of client) & "\bfmirror\downloads")))))) <free space of drive whose (type ofit="DRIVE_FIXED"AND free space ofit= maximum of (free spaces of drives whose (type ofit="DRIVE_FIXED")))
if ( existstruewhose ( iftruethen ( exists relay service ) elsefalse ) ) then ( if ( version of client >= "8.0" ) then ( version of relay service as string ) else ( version of file ( ( if ( character 0ofit="%22" ) then ( substring between "%22"ofit ) elseit ) of image path of relay service ) as string ) ) else"Not Installed"
if (existstruewhose(iftruethen(exists relay service)elsefalse)) then (if (version of client >= "8.0") then (version of relay service as string) else (version of file ((if (character 0ofit="%22") then (substring between "%22"ofit) elseit) of image path of relay service) as string)) else"Not Installed"