Some users may be experiencing issues when trying to access customer resources like the Case Portal or the Product Licensing Center. Our team is aware of the issue and is working to resolve it. Click here for more information.
Investigating a potential false positive on Apache log4j. The reported evidence type is ISMP (InstallShield Multiplatform) coming from the FlexNet Agent, as the only source reporting (we also co-run BMC Discovery on these servers). The odd thing about this is that our organization doesn't use Installshield.
In checking Discovered Evidence, I note a total of 70 Installer Evidence reporting under ISMP (out of over 33,000). This makes me wonder under what conditions FlexNet utilizes ISMP to classify Evidence Type. Is this some kind of default? Again, we're not running this kind of package installation technology.
‎Dec 20, 2021 07:47 AM
ISMP is used by many software publisher to package their own applications. Therefore, in the process of installing software you may be creating ISMP Evidence as the packages you are running from the publishers are using ISMP to install the primary package and/or different components.
‎Dec 20, 2021 09:01 AM
InstallShield Multiplatform evidence details will typically be gathered from files named "vpd.properties" or "vpd.script" that exist on computers that the FlexNet agent has gathered inventory from.
To restate @kclausen's comments, if you see installer evidence of the type "ISMP" in your organization that is indicating the developers of software installed on your computers have likely used InstallShield Multiplatform. This isn't determined by whether your own organization uses that product for developing software installers.
‎Dec 20, 2021 09:16 PM
User | Count |
---|---|
8 | |
6 | |
3 | |
3 |