( ( now > item 1ofit ) AND ( if ( item 0ofit="once" ) then ( ( item 1ofit & item 2ofit ) ) elseif ( item 0ofit="daily" ) then ( ( item 1ofit + ( ( now - item 1ofit ) / day / item 3ofit * ( day * item 3ofit ) ) ) & item 2ofit ) elseif ( item 0ofit="weekly" ) then ( it & ( ( value of setting "MaintenanceWindow_WindowSizeMinutes"of client as integer ) * minute ) ) of ( maximum of ( it - 1*day; it - 2*day; it - 3*day; it - 4*day; it - 5*day; it-6 * day;it; it + 1*day; it + 2*day;it + 3*day;it + 4*day;it + 5*day;it + 6*day ) whose ( it < now AND ( ( ( value of setting "MaintenanceWindow_DaysOfWeek"of client as string as lowercase ) ) contains ( first 3of ( itas string ) as day_of_week as string as lowercase ) ) ) of ( ( ( current date - item 0ofit ) / ( item 3ofit * week ) * ( item 3ofit * week ) ) + item 0ofit & item 1ofit ) of ( ( ( ( date ( local time zone ) of item 1ofit - ( ( first 3of ( item 1ofitas string ) as day_of_week ) - sunday ) ) ) , time ( local time zone ) of item 1of it, item 2of it, item 3ofit ) ) ) elseif ( item 0ofit="monthly" ) then ( it & ( value of setting "MaintenanceWindow_WindowSizeMinutes"of client as integer * minute ) ) of ( ( if ( item 3ofit=0 ) then ( maximum of ( ( ifexists ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( current month & current year ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) then ( ( ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( current month & current year ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) ) & time ( local time zone ) of item 1ofit ) else nothing ) ; ( ifexists ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( ( current month - month ) & current year ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) then ( if ( current month as integer =1 ) then ( ( ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( ( current month - month ) & ( ( current year ) - 1* year ) ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) ) & time ( local time zone ) of item 1ofit ) else ( ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( ( current month - month ) & current year ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) ) & time ( local time zone ) of item 1ofit ) else nothing ) ; ( ifexists ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( ( current month - ( 2*month ) ) & current year ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) then ( if ( current month as integer =1 ) then ( ( ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( ( current month - ( 2*month ) ) & ( ( current year ) - 1* year ) ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) ) & time ( local time zone ) of item 1ofit ) else ( ( first ( value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week ) of ( ( current month - ( 2*month ) ) & current year ) + ( ( value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1 ) * week ) ) ) & time ( local time zone ) of item 1ofit ) else nothing ) ) whose ( it < now ) ) else ( maximum of ( ( ifexists ( ( current month & ( day_of_month ( item 3ofit ) ) ) ) then ( ( ( current month & ( day_of_month ( item 3ofit ) ) ) & current year ) & time ( local time zone ) of item 1ofit ) else nothing ) ; ( ifexists ( ( ( current month - 1* month ) & ( day_of_month ( item 3ofit ) ) ) ) then ( if ( current month as integer =1 ) then ( ( ( ( current month - 1*month ) & ( day_of_month ( item 3ofit ) ) ) & ( current year - 1*year ) ) & time ( local time zone ) of item 1ofit ) else ( ( ( current month - 1*month ) & ( day_of_month ( item 3ofit ) ) ) & current year ) & time ( local time zone ) of item 1ofit ) else nothing ) ; ( ifexists ( ( ( current month - 2*month ) & ( day_of_month ( item 3ofit ) ) ) ) then ( if ( current month as integer =1 ) then ( ( ( ( current month - 2*month ) & ( day_of_month ( item 3ofit ) ) ) & ( current year - 1*year ) ) & time ( local time zone ) of item 1ofit ) else ( ( ( current month - 2*month ) & ( day_of_month ( item 3ofit ) ) ) & current year ) & time ( local time zone ) of item 1ofit ) else nothing ) ) whose ( it < now ) ) ) ) else error "invalid maintenance type" ) contains now ) of ( value of setting "MaintenanceWindow_RepeatType"of client, ( value of setting "MaintenanceWindow_StartTime"of client & " " & local time zone as string ) as time, ( value of setting "MaintenanceWindow_WindowSizeMinutes"of client as integer ) * minute, value of setting "MaintenanceWindow_RepeatInterval"of client as integer ) = value of setting "__Lockstate"of client as boolean
((now > item 1ofit) AND (if (item 0ofit="once") then ((item 1ofit & item 2ofit)) elseif (item 0ofit="daily") then ((item 1ofit + ((now - item 1ofit) / day / item 3ofit * (day * item 3ofit))) & item 2ofit) elseif (item 0ofit="weekly") then (it & ((value of setting "MaintenanceWindow_WindowSizeMinutes"of client as integer) * minute)) of (maximum of (it - 1*day; it - 2*day; it - 3*day; it - 4*day; it - 5*day; it-6 * day;it; it + 1*day; it + 2*day;it + 3*day;it + 4*day;it + 5*day;it + 6*day) whose (it < now AND (((value of setting "MaintenanceWindow_DaysOfWeek"of client as string as lowercase)) contains (first 3of (itas string) as day_of_week as string as lowercase))) of (((current date - item 0ofit) / (item 3ofit * week) * (item 3ofit * week)) + item 0ofit & item 1ofit) of ((((date (local time zone) of item 1ofit - ((first 3of (item 1ofitas string) as day_of_week) - sunday))) , time (local time zone) of item 1of it, item 2of it, item 3ofit))) elseif (item 0ofit="monthly") then (it & (value of setting "MaintenanceWindow_WindowSizeMinutes"of client as integer * minute)) of ((if (item 3ofit=0) then (maximum of ((ifexists (first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of (current month & current year) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week)) then (((first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of (current month & current year) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week))) & time (local time zone) of item 1ofit) else nothing) ; (ifexists (first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of ((current month - month) & current year) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week)) then (if (current month as integer =1) then (((first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of ((current month - month) & ((current year) - 1* year)) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week))) & time (local time zone) of item 1ofit) else ((first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of ((current month - month) & current year) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week))) & time (local time zone) of item 1ofit) else nothing) ; (ifexists (first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of ((current month - (2*month)) & current year) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week)) then (if (current month as integer =1) then (((first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of ((current month - (2*month)) & ((current year) - 1* year)) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week))) & time (local time zone) of item 1ofit) else ((first (value of setting "MaintenanceWindow_DaysOfWeek"of client as day_of_week) of ((current month - (2*month)) & current year) + ((value of setting "MaintenanceWindow_DayOrdinal"of client as integer - 1) * week))) & time (local time zone) of item 1ofit) else nothing)) whose (it < now)) else (maximum of ((ifexists ((current month & (day_of_month (item 3ofit)))) then (((current month & (day_of_month (item 3ofit))) & current year) & time (local time zone) of item 1ofit) else nothing) ; (ifexists (((current month - 1* month) & (day_of_month (item 3ofit)))) then (if (current month as integer =1) then ((((current month - 1*month) & (day_of_month (item 3ofit))) & (current year - 1*year)) & time (local time zone) of item 1ofit) else (((current month - 1*month) & (day_of_month (item 3ofit))) & current year) & time (local time zone) of item 1ofit) else nothing) ; (ifexists (((current month - 2*month) & (day_of_month (item 3ofit)))) then (if (current month as integer =1) then ((((current month - 2*month) & (day_of_month (item 3ofit))) & (current year - 1*year)) & time (local time zone) of item 1ofit) else (((current month - 2*month) & (day_of_month (item 3ofit))) & current year) & time (local time zone) of item 1ofit) else nothing)) whose (it < now)))) else error "invalid maintenance type") contains now) of (value of setting "MaintenanceWindow_RepeatType"of client, (value of setting "MaintenanceWindow_StartTime"of client & " " & local time zone as string) as time, (value of setting "MaintenanceWindow_WindowSizeMinutes"of client as integer) * minute, value of setting "MaintenanceWindow_RepeatInterval"of client as integer) = value of setting "__Lockstate"of client as boolean
if ( ( it="WinXP"ORit="WinXP-2003"ORit="WinVista"ORit="Win7"ORit="Win2008"ORit="Win2008R2" ) of name of operating system ) then ( ( exists values whose ( name ofit="PnPCapabilities"ANDitas integer =48 ) of keys whose ( value "Characteristics"ofitas integer =132 ) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}"of registry ) ) else ( if ( name of operating system ="Mac OS X" ) then ( ifexists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist"then ( ( ifit=1thentrueelsefalse ) of integer "Wake On LAN"of dictionary "AC Power"of dictionary "Custom Profile"of dictionary of file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" ) elsefalse ) elsefalse )
if ((it="WinXP"ORit="WinXP-2003"ORit="WinVista"ORit="Win7"ORit="Win2008"ORit="Win2008R2") of name of operating system) then ((exists values whose(name ofit="PnPCapabilities"ANDitas integer =48 ) of keys whose(value "Characteristics"ofitas integer =132) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}"of registry)) else (if (name of operating system ="Mac OS X") then (ifexists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist"then ((ifit=1thentrueelsefalse) of integer "Wake On LAN"of dictionary "AC Power"of dictionary "Custom Profile"of dictionary of file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist") elsefalse) elsefalse)
if ( ( it="WinXP"ORit="WinXP-2003"ORit="WinVista"ORit="Win7"ORit="Win2008"ORit="Win2008R2" ) of name of operating system ) then ( ( notexists values whose ( name ofit="PnPCapabilities"ANDitas integer =288 ) of keys whose ( value "Characteristics"ofitas integer =132 ) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}"of registry ) ) else ( if ( name of operating system ="Mac OS X" ) then ( ifexists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist"then ( ( ifit=0thentrueelsefalse ) of integer "Wake On LAN"of dictionary "AC Power"of dictionary "Custom Profile"of dictionary of file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" ) elsefalse ) elsefalse )
if ((it="WinXP"ORit="WinXP-2003"ORit="WinVista"ORit="Win7"ORit="Win2008"ORit="Win2008R2") of name of operating system) then ((notexists values whose (name ofit="PnPCapabilities"ANDitas integer =288) of keys whose (value "Characteristics"ofitas integer =132) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}"of registry)) else (if (name of operating system ="Mac OS X") then (ifexists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist"then ((ifit=0thentrueelsefalse) of integer "Wake On LAN"of dictionary "AC Power"of dictionary "Custom Profile"of dictionary of file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist") elsefalse) elsefalse)
NOT ( ( ( exists rule whose ( ( NOTexists local ports string ofitOR local ports string ofitcontains ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) OR local ports string ofit="*" ) AND ( ( ( application name ofit ends with"\BESClient.exe" ) ANDNOT ( service name ofit="BESClient" ) ) OR ( regex "^(\s)*$"= application name ofitAND regex "^(\s)*$"= service name ofit ) ) and enabled ofitand protocol ofit= udp and inbound ofitand profile ( current profile type of firewall ) ofit ) of firewall ) OR ( exists internet connection firewall whose ( enabled ofitANDexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network ) OR ( exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ( ( exists value whose ( itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and ( itas string as lowercase contains"|protocol=17|"orNOT ( itas string as lowercase contains"|protocol" ) ) AND ( itas string as lowercase contains"|lport=" & ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) & "|"ORnot ( itas string as lowercase contains"|lport=" ) ) AND ( not ( ( itas string as lowercase contains"|app=" ) ) OR ( itas string as lowercase contains"|app="anditas string contains"\BESClient.exe|" ) ) AND ( ( itas string as lowercase contains"|profile=" & ( if ( current profile type of firewall = domain firewall profile type ) then"domain|"elseif ( current profile type of firewall = public firewall profile type ) then"public|"elseif ( current profile type of firewall = private firewall profile type ) then"private|"else"INVALID" ) ) ORnot ( itas string as lowercase contains"|profile" ) ) ) ofit ) ) of native registry ) OR ( ( ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\GloballyOpenPorts" ) whose ( exists value whose ( ( name ofitas lowercase ="enabled" ) AND ( it=1 ) ) ofit ) ofit ) AND ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\GloballyOpenPorts\List" ) whose ( exists value whose ( ( name ofitstartswith value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of x32 registry as string & ":" ) AND ( regex "^(\d)+:UDP:(.+)?:enabled:(.+)$"= name ofit ) ) ofit ) ofit ) ) of native registry ) OR ( ( ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\AuthorizedApplications" ) whose ( exists value whose ( ( name ofitas lowercase ="enabled" ) AND ( it=1 ) ) ofit ) ofit ) AND ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\AuthorizedApplications\List" ) whose ( exists value whose ( ( regex "^(.+)?\\BESClient.exe:(.+)?:enabled:(.+)$"= name ofit ) ) ofit ) ofit ) ) of native registry ) ) AND ( ( exists key ( "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then"DomainProfile"else"StandardProfile" ) & "\IcmpSettings" ) whose ( exists value whose ( name ofit="AllowInboundEchoRequest"andit=1 ) ofit ) of native registry ) OR ( ( ( exists rule whose ( ( enabled ofitand ( protocol ofit= internet protocol 1 ) and inbound ofitand profile ( current profile type of firewall ) ofitand ( regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe" ) AND regex "^(\s)*$"= service name ofit ) ) of firewall ) OR ( exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ( exists value whose ( itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and ( itas string as lowercase contains"|protocol=1|"orNOT ( itas string as lowercase contains"|protocol" ) ) AND ( itas string as lowercase contains"|lport=" & ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) & "|"ORnot ( itas string as lowercase contains"|lport=" ) ) AND ( not ( ( itas string as lowercase contains"|app=" ) ) OR ( if ( itas string as lowercase contains"|app=" ) then ( itas string contains"\BESClient.exe|" ) elsetrue ) AND ( ( itas string as lowercase contains"|profile=" & ( if ( current profile type of firewall = domain firewall profile type ) then"domain|"elseif ( current profile type of firewall = public firewall profile type ) then"public|"elseif ( current profile type of firewall = private firewall profile type ) then"private|"else"INVALID" ) ) ORnot ( itas string as lowercase contains"|profile" ) ) ) ofit ) ofit ) of native registry ) ) AND ( ( exists rule whose ( ( enabled ofitand ( protocol ofit= internet protocol 58 ) and inbound ofitand profile ( current profile type of firewall ) ofitand ( regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe" ) AND regex "^(\s)*$"= service name ofit ) ) of firewall ) OR ( exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ( exists value whose ( itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and ( itas string as lowercase contains"|protocol=58|"orNOT ( itas string as lowercase contains"|protocol" ) ) AND ( itas string as lowercase contains"|lport=" & ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) & "|"ORnot ( itas string as lowercase contains"|lport=" ) ) AND ( not ( ( itas string as lowercase contains"|app=" ) ) OR ( if ( itas string as lowercase contains"|app=" ) then ( itas string contains"\BESClient.exe|" ) elsetrue ) AND ( ( itas string as lowercase contains"|profile=" & ( if ( current profile type of firewall = domain firewall profile type ) then"domain|"elseif ( current profile type of firewall = public firewall profile type ) then"public|"elseif ( current profile type of firewall = private firewall profile type ) then"private|"else"INVALID" ) ) ORnot ( itas string as lowercase contains"|profile" ) ) ) ofit ) ofit ) of native registry ) ) ) ) )
NOT (((exists rule whose ((NOTexists local ports string ofitOR local ports string ofitcontains (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) OR local ports string ofit="*") AND (((application name ofit ends with"\BESClient.exe") ANDNOT (service name ofit="BESClient")) OR (regex "^(\s)*$"= application name ofitAND regex "^(\s)*$"= service name ofit)) and enabled ofitand protocol ofit= udp and inbound ofitand profile (current profile type of firewall) ofit) of firewall) OR (exists internet connection firewall whose (enabled ofitANDexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose ((exists value whose (itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and (itas string as lowercase contains"|protocol=17|"orNOT (itas string as lowercase contains"|protocol")) AND (itas string as lowercase contains"|lport=" & (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) & "|"ORnot (itas string as lowercase contains"|lport=")) AND (not ((itas string as lowercase contains"|app=")) OR (itas string as lowercase contains"|app="anditas string contains"\BESClient.exe|")) AND ((itas string as lowercase contains"|profile=" & (if (current profile type of firewall = domain firewall profile type) then"domain|"elseif (current profile type of firewall = public firewall profile type) then"public|"elseif (current profile type of firewall = private firewall profile type) then"private|"else"INVALID")) ORnot (itas string as lowercase contains"|profile"))) ofit)) of native registry) OR (((exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\GloballyOpenPorts") whose (exists value whose ((name ofitas lowercase ="enabled") AND (it=1)) ofit) ofit) AND (exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\GloballyOpenPorts\List") whose (exists value whose ((name ofitstartswith value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of x32 registry as string & ":") AND (regex "^(\d)+:UDP:(.+)?:enabled:(.+)$"= name ofit)) ofit) ofit)) of native registry) OR (((exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\AuthorizedApplications") whose (exists value whose ((name ofitas lowercase ="enabled") AND (it=1)) ofit) ofit) AND (exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\AuthorizedApplications\List") whose (exists value whose ((regex "^(.+)?\\BESClient.exe:(.+)?:enabled:(.+)$"= name ofit)) ofit) ofit)) of native registry)) AND ((exists key ("HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then"DomainProfile"else"StandardProfile") & "\IcmpSettings") whose (exists value whose (name ofit="AllowInboundEchoRequest"andit=1) ofit) of native registry) OR (((exists rule whose ((enabled ofitand (protocol ofit= internet protocol 1) and inbound ofitand profile (current profile type of firewall) ofitand (regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe") AND regex "^(\s)*$"= service name ofit)) of firewall) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose (exists value whose (itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and (itas string as lowercase contains"|protocol=1|"orNOT (itas string as lowercase contains"|protocol")) AND (itas string as lowercase contains"|lport=" & (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) & "|"ORnot (itas string as lowercase contains"|lport=")) AND (not ((itas string as lowercase contains"|app=")) OR (if (itas string as lowercase contains"|app=") then (itas string contains"\BESClient.exe|") elsetrue) AND ((itas string as lowercase contains"|profile=" & (if (current profile type of firewall = domain firewall profile type) then"domain|"elseif (current profile type of firewall = public firewall profile type) then"public|"elseif (current profile type of firewall = private firewall profile type) then"private|"else"INVALID")) ORnot (itas string as lowercase contains"|profile"))) ofit) ofit) of native registry)) AND ((exists rule whose ((enabled ofitand (protocol ofit= internet protocol 58) and inbound ofitand profile (current profile type of firewall) ofitand (regex "^(\s)*$"= application name ofitOR application name ofit ends with"\BESClient.exe") AND regex "^(\s)*$"= service name ofit)) of firewall) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules"whose (exists value whose (itas string as lowercase contains"|action=allow|"anditas string as lowercase contains"|active=true|"ANDitas string as lowercase contains"|dir=in|"and (itas string as lowercase contains"|protocol=58|"orNOT (itas string as lowercase contains"|protocol")) AND (itas string as lowercase contains"|lport=" & (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) & "|"ORnot (itas string as lowercase contains"|lport=")) AND (not ((itas string as lowercase contains"|app=")) OR (if (itas string as lowercase contains"|app=") then (itas string contains"\BESClient.exe|") elsetrue) AND ((itas string as lowercase contains"|profile=" & (if (current profile type of firewall = domain firewall profile type) then"domain|"elseif (current profile type of firewall = public firewall profile type) then"public|"elseif (current profile type of firewall = private firewall profile type) then"private|"else"INVALID")) ORnot (itas string as lowercase contains"|profile"))) ofit) ofit) of native registry)))))
( ( name ofit="Win2003"AND service pack major version ofit >= 1 ) OR ( ( version of registration server >= "7.2" ) AND ( ( ( name ofit="WinVista"AND product type ofit!= nt workstation product type ) OR ( name ofit="Win2008" ) ) ) AND ( exists regapp "iexplore.exe" ) ) OR ( ( version of registration server >= "8" ) AND ( ( ( name ofit="Win2008R2" ) ) ) AND ( exists regapp "iexplore.exe" ) ) ) of operating system
((name ofit="Win2003"AND service pack major version ofit >= 1) OR ((version of registration server >= "7.2") AND (((name ofit="WinVista"AND product type ofit!= nt workstation product type) OR (name ofit="Win2008"))) AND (exists regapp "iexplore.exe")) OR ((version of registration server >= "8") AND (((name ofit="Win2008R2"))) AND (exists regapp "iexplore.exe"))) of operating system
( ( itstartswith"Win" ) OR ( itstartswith"AIX" ) OR ( itstartswith"HP-UX" ) OR ( itstartswith"Mac OS X" ) OR ( itstartswith"VMWare" ) OR ( itstartswith"SunOS" ) OR ( itstartswith"Linux" ) ) of name of operating system
((itstartswith"Win") OR (itstartswith"AIX") OR (itstartswith"HP-UX") OR (itstartswith"Mac OS X") OR (itstartswith"VMWare") OR (itstartswith"SunOS") OR (itstartswith"Linux")) of name of operating system
( notexists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry AND firewall enabled of current profile of local policy of firewall ) OR ( exists key ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "EnableFirewall"ofit=1 ) of registry )
(notexists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry AND firewall enabled of current profile of local policy of firewall) OR (exists key ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "EnableFirewall"ofit=1) of registry)
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp AND enabled ofit ) ofitANDnotexists authorized application whose ( process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit ) ofit ) of current profile of local policy of firewall ANDexists internet connection firewall whose ( enabled ofitANDnotexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry ) as string ) ofit ) of adapters of network )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp AND enabled ofit) ofitANDnotexists authorized application whose (process image file name ofitas lowercase ends with"besclient.exe"AND enabled ofit) ofit) of current profile of local policy of firewall ANDexists internet connection firewall whose (enabled ofitANDnotexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry) as string) ofit) of adapters of network)
exists key ( if ( exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry ) then ( "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\" ) else ( "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" ) & ( if ( current profile type of firewall = domain firewall profile type ) then ( "DomainProfile" ) else ( "StandardProfile" ) ) ) whose ( value "DoNotAllowExceptions"ofit=1 ) of registry OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= tcp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besrelay.exe"ORit ends with"filldb.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) ) OR ( ( notexists globally open port whose ( enabled ofitAND port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) AND protocol ofit= udp ) of current profile of local policy of firewall ) AND ( exists internet connection firewall whose ( enabled ofitAND ( notexists port mapping whose ( enabled ofitAND protocol ofit="udp"AND internal port ofitas string = ( value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string ) ) ofit ) ) of adapters of network ) AND ( notexists authorized application whose ( enabled ofitAND ( it ends with"besclient.exe" ) of ( process image file name ofitas lowercase ) ) of current profile of local policy of firewall ) )
exists key (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall"of registry) then ("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\") else ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\") & (if (current profile type of firewall = domain firewall profile type) then ("DomainProfile") else ("StandardProfile"))) whose (value "DoNotAllowExceptions"ofit=1) of registry OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= tcp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="tcp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besrelay.exe"ORit ends with"filldb.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall)) OR ((notexists globally open port whose (enabled ofitAND port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string) AND protocol ofit= udp) of current profile of local policy of firewall) AND (exists internet connection firewall whose (enabled ofitAND (notexists port mapping whose (enabled ofitAND protocol ofit="udp"AND internal port ofitas string = (value "ListenPort"of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions"of registry as string)) ofit)) of adapters of network) AND (notexists authorized application whose (enabled ofitAND (it ends with"besclient.exe") of (process image file name ofitas lowercase)) of current profile of local policy of firewall))
( free space of drive ( first 2of ( value "value"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath"of x32 registry as string ) ) + ( sum of ( sizes of files of folders of folder ( ( if ( value of setting "_BESRelay_HTTPServer_ServerRootPath"of client ) ends with"\"then ( ( value of setting "_BESRelay_HTTPServer_ServerRootPath"of client ) & "bfmirror\downloads" ) else ( ( value of setting "_BESRelay_HTTPServer_ServerRootPath"of client ) & "\bfmirror\downloads" ) ) ) ) ) ) <free space of drive whose ( type ofit="DRIVE_FIXED"AND free space ofit= maximum of ( free spaces of drives whose ( type ofit="DRIVE_FIXED" ) ) )
(free space of drive (first 2of (value "value"of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath"of x32 registry as string)) + (sum of (sizes of files of folders of folder ((if(value of setting "_BESRelay_HTTPServer_ServerRootPath"of client) ends with"\"then ((value of setting "_BESRelay_HTTPServer_ServerRootPath"of client) & "bfmirror\downloads") else ((value of setting "_BESRelay_HTTPServer_ServerRootPath"of client) & "\bfmirror\downloads")))))) <free space of drive whose (type ofit="DRIVE_FIXED"AND free space ofit= maximum of (free spaces of drives whose (type ofit="DRIVE_FIXED")))
( name ofit!="WinME"AND name ofit!="Win98"AND name ofit!="Win95"ANDNOT ( name ofit="WinVista"and product type ofit!= nt workstation product type ) AND name ofit!="Win2008" ) of operating system
(name ofit!="WinME"AND name ofit!="Win98"AND name ofit!="Win95"ANDNOT (name ofit="WinVista"and product type ofit!= nt workstation product type) AND name ofit!="Win2008") of operating system