( exists file "/etc/enterprise-release"whose ( exists line whose ( exists match ( regex "Enterprise Linux Enterprise Linux (AS|Server) release 4" ) ofit ) ofit ) ) OR ( exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitoritcontains ( "CentOS release 4" ) ) ofit ) )
(exists file "/etc/enterprise-release"whose (exists line whose (exists match (regex "Enterprise Linux Enterprise Linux (AS|Server) release 4") ofit) ofit)) OR (exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitoritcontains ("CentOS release 4")) ofit))
( exists match ( regex "Linux Red Hat Enterprise (Server|Desktop) (5|6)" ) of name of operating system ) OR ( exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofit ) ofit ) )
(exists match (regex "Linux Red Hat Enterprise (Server|Desktop) (5|6)") of name of operating system) OR (exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofit) ofit))
( exists file "/etc/enterprise-release"whose ( exists line whose ( exists match ( regex "Enterprise Linux Enterprise Linux (AS|Server) release 5" ) ofit ) ofit ) ) OR ( exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server|Workstation) release (5|6)" ) ofitorexists match ( regex "CentOS.* (5|6)" ) ofit ) ofit ) )
(exists file "/etc/enterprise-release"whose (exists line whose (exists match (regex "Enterprise Linux Enterprise Linux (AS|Server) release 5") ofit) ofit)) OR (exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server|Workstation) release (5|6)") ofitorexists match (regex "CentOS.* (5|6)") ofit) ofit))
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5" ) ofit ) ofit ) OR ( itstartswith"linux fedora core"AND following text of last " "ofitas version >= "3"and following text of last " "ofitas version < "6" ) of ( name of operating system as lowercase )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitorexists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5") ofit) ofit) OR (itstartswith"linux fedora core"AND following text of last " "ofitas version >= "3"and following text of last " "ofitas version < "6") of (name of operating system as lowercase)
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitorexists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5") ofit) ofit)
( ( itstartswith"Win" ) OR ( itstartswith"AIX" ) OR ( itstartswith"HP-UX" ) OR ( itstartswith"Mac OS X" ) OR ( itstartswith"VMWare" ) OR ( itstartswith"SunOS" ) OR ( itstartswith"Linux" ) ) of name of operating system
((itstartswith"Win") OR (itstartswith"AIX") OR (itstartswith"HP-UX") OR (itstartswith"Mac OS X") OR (itstartswith"VMWare") OR (itstartswith"SunOS") OR (itstartswith"Linux")) of name of operating system
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux (AS|ES|WS) release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5" ) ofitorexists match ( regex "Fedora Core release (3|4|5|6|7)" ) ofitorexists match ( regex "Fedora release (3|4|5|6|7)" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (AS|ES|WS) release 4") ofitorexists match (regex "Red Hat Enterprise Linux (Client|Desktop|Server) release 5") ofitorexists match (regex "Fedora Core release (3|4|5|6|7)") ofitorexists match (regex "Fedora release (3|4|5|6|7)") ofit) ofit)
( exists running application "BESRootServer.exe"ANDexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose ( exists ( ( value "Version"ofit ) as string as version ) whose ( it < "7.2.5.22"ANDit >= "6" ) ANDexists value "BESInstalled"ofitAND value "BESInstalled"ofit=1 ) of registry ) OR ( exists regapp "BESConsole.exe"whose ( version ofit < "7.2.5.22"AND version ofit >= "6" ) )
(exists running application "BESRootServer.exe"ANDexists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server"whose (exists ((value "Version"ofit) as string as version) whose (it < "7.2.5.22"ANDit >= "6") ANDexists value "BESInstalled"ofitAND value "BESInstalled"ofit=1) of registry) OR (exists regapp "BESConsole.exe"whose (version ofit < "7.2.5.22"AND version ofit >= "6"))
exists file "/etc/redhat-release"whose ( exists line whose ( exists match ( regex "Red Hat Enterprise Linux AS release 4" ) ofitorexists match ( regex "Red Hat Enterprise Linux Server release 5" ) ofit ) ofit )
exists file "/etc/redhat-release"whose (exists line whose (exists match (regex "Red Hat Enterprise Linux AS release 4") ofitorexists match (regex "Red Hat Enterprise Linux Server release 5") ofit) ofit)
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp AND enabled ofit ) ofitANDnotexists authorized application whose ( process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit ) ofit ) of current profile of local policy of firewall ANDexists internet connection firewall whose ( enabled ofitANDnotexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp AND enabled ofit) ofitANDnotexists authorized application whose (process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit) ofit) of current profile of local policy of firewall ANDexists internet connection firewall whose (enabled ofitANDnotexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network)
( ( exists running service "BESRelay" ) OR ( exists running service "BESRootServer" ) ) AND ( exists value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry AND value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry !="" )
((exists running service "BESRelay") OR (exists running service "BESRootServer")) AND (exists value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry AND value "carboncopypath"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\PostResults"of registry !="")
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= tcp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besrelay.exe"ORit ends with"filldb.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) ) OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besclient.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= tcp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besrelay.exe"ORit ends with"filldb.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall)) OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besclient.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall))