( exists running application "BESRootServer.exe"ANDexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose ( exists ( ( value "Version"ofit ) as string as version ) whose ( it < "7.2.5.22"ANDit >= "6" ) ANDexists value "BESInstalled"ofitAND value "BESInstalled"ofit=1 ) of registry ) OR ( exists regapp "BESConsole.exe"whose ( version ofit < "7.2.5.22"AND version ofit >= "6" ) )
(exists running application "BESRootServer.exe"ANDexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose (exists ((value "Version"ofit) as string as version) whose (it < "7.2.5.22"ANDit >= "6") ANDexists value "BESInstalled"ofitAND value "BESInstalled"ofit=1) of registry) OR (exists regapp "BESConsole.exe"whose (version ofit < "7.2.5.22"AND version ofit >= "6"))
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp AND enabled ofit ) ofitANDnotexists authorized application whose ( process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit ) ofit ) of current profile of local policy of firewall ANDexists internet connection firewall whose ( enabled ofitANDnotexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp AND enabled ofit) ofitANDnotexists authorized application whose (process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit) ofit) of current profile of local policy of firewall ANDexists internet connection firewall whose (enabled ofitANDnotexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network)
( ( exists running service "BESRelay" ) OR ( exists running service "BESRootServer" ) ) AND ( exists value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry AND value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry !="" )
((exists running service "BESRelay") OR (exists running service "BESRootServer")) AND (exists value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry AND value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry !="")
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= tcp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besrelay.exe"ORit ends with"filldb.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) ) OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besclient.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= tcp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besrelay.exe"ORit ends with"filldb.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall)) OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besclient.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall))