Requirement Confirmation
The Scan Engine installer provides a step to test that the product prerequisites have been met. The install verifies that the components needed are installed and running correctly in advance of trying to install it.
The tool provides visual indicators of success. All checks must run successfully before an install of the product.
Default Ports List
Ports Recommended for Discovery
This is a list of example ports that can be provided to the discovery phase. The identification of these as open ports identifies a device is present.
Port |
Description |
21 |
FTP control (command) |
22 |
Secure Shell (SSH) used for secure logins file transfers (scp sftp) and port forwarding |
23 |
Telnet protocol unencrypted text communications |
25 |
Simple Mail Transfer Protocol (SMTP) used for e-mail routing between mail servers |
80 |
Hypertext Transfer Protocol (HTTP) |
110 |
Post Office Protocol 3 (POP3) |
135 |
DCE endpoint resolution |
139 |
NetBIOS Session Service |
143 |
Internet Message Access Protocol (IMAP) used for retrieving organizing and synchronizing e-mail messages |
443 |
Hypertext Transfer Protocol over TLS/SSL (HTTPS) |
445 |
Microsoft-DS SMB file sharing |
902 |
VMWare ESX |
1520 |
Oracle database common alternative for listener |
1521 |
Oracle database default listener |
1522 1529 |
Oracle database common alternative for listener |
3389 |
Microsoft Terminal Server (RDP) officially registered as Windows Based Terminal (WBT) |
5985 |
Windows PowerShell default psSession Port |
7001 |
Default for BEA WebLogic Servers HTTP server though often changed during installation |
Discovery can be achieved by Certificate Analysis and TCP Provider (Port Scan). Either of these connection types can potentially use ports from this list. The TCP Provider uses ports 22,23,80,443,135,139,445,5985,5986,902 by default.
Ports required for Inventory
These ports are all required to be opened to facilitate inventory of the devices and enterprise applications. Custom ports configured by DBA may also need to be included.
Port |
Protocol |
Service |
Device or Application |
---|---|---|---|
22 |
TCP |
SSH |
UNIX/Linux devices |
23 |
TCP |
Telnet |
UNIX/Linux devices |
80 |
TCP |
HTTP |
VMware vCenter |
443 |
TCP |
HTTPS |
VMware vCenter |
135 |
TCP |
RPC |
Windows devices |
139 |
TCP |
NETBIOS Session |
Windows devices |
445 |
TCP |
SMB |
Windows devices |
137 |
UDP |
NETBIOS Datagram |
Windows devices |
138 |
UDP |
NETBIOS Datagram |
Windows devices |
139 |
UDP |
NETBIOS Session |
Windows devices |
49152 |
TCP |
WMI dynamic ports |
Windows Vista/Server 2008 or higher(1) |
1025 |
TCP |
WMI dynamic ports |
Windows XP/Server 2003 or lower(1) |
1433 |
TCP |
SQL Server |
Microsoft SQL Server scanning |
1521 |
TCP |
Oracle Database |
Oracle RDBMS scanning, default listener |
1526 |
TCP |
Informix |
Informix scanning, default port |
2025 |
SSH, WMI |
Sybase |
Sybase scanning |
50000 |
TCP |
DB2 |
IBM DB2 default |
Privileged Command Access
The following commands, namespaces, or registry hives are used by the iQSonar Scan Engine , and a user must be provided access to these commands in order to successfully retrieve inventory data.
Platform |
|
Commands |
|
|
---|---|---|---|---|
*NIX |
BASIC |
awk |
egrep |
tail |
|
Veritas Clustering |
haclus |
hastatus |
|
|
IBM DB2 |
db2 |
db2ls |
|
|
Informix |
oninit |
onstat |
|
|
ALL |
df |
lscfg |
lsattr |
AIX |
VIO/LPAR |
ioslevel |
lsdev |
lssyscfg |
|
HMC |
lshmc |
lshwres |
oslevel |
|
ALL |
blkid |
free |
netstat |
LINUX |
ALL |
blkid |
dpkg-query (Debian distro) |
print_manifest |
HPUX |
HMC |
lshmc |
|
|
|
ALL |
adb |
Ioscan |
lstcpip |
Solaris |
ALL |
nawk |
ifconfig |
ps |
Windows(WMI) |
|
|
|
|
|
|
root\default |
|
|
Windows (Registry) |
|
HKEY_LOCAL_MACHINE |
|
|
Windows (WMI) |
|
These commands above are issued directly as RPC calls and SSH/Telnet commands on the remote target. |
|
|
MS SQL Server Systems Object
When scanning Microsoft SQL Server, the following system objects need to be accessed and read to gather the required information. The system object accesses are listed in the table below:
System Object |
Platform |
[MASTER]..[SYSLOGINS] |
MSSQL 2000 or higher |
[MASTER]..[SYSPROCESSES] |
MSSQL 2000 or higher |
[MASTER]..[SYSDATABASES] |
MSSQL 2000 |
[MASTER]..[SYSALTFILES] |
MSSQL 2000 |
SYS.SQL_LOGINS |
SQL Azure |
SYS.DM_OS_SYS_INFO |
MSSQL 2005 or higher |
SYS.DM_OS_CLUSTER_NODES |
MSSQL 2005 or higher |
SYS.DATABASE_MIRRORING |
MSSQL 2005 or higher |
SYS.DATABASES |
MSSQL 2005 |
SERVERPROPERTY('') |
MSSQL 2000 or higher |
::FN_VIRTUALSERVERNODES() |
MSSQL 2000 |
DB_NAME() |
MSSQL 2000 or higher |
SYS.MASTER_FILES |
MSSQL 2000 or higher |
SUSER_SNAME() |
MSSQL 2000 |
@@SERVERNAME |
MSSQL 2000 or higher |
@@VERSION |
MSSQL 2000 or higher |
Key Terms
Key Term |
Definition |
Advanced Encryption Standard |
Advanced Encryption Standard (AES) is a specification for the encryption of electronic data established by the U.S. National Institute of Standards and Technology (NIST) in 2001. |
Dedicated Server |
a server designated to be a scanning server |
DLL |
dynamic link library |
Estate Access |
access to all devices within a network |
GAC |
global assembly cache |
iQSonar Scan Engine |
an agentless scanning tool used for discovery and inventory |
Network Inventory Tool |
a tool used to gather data on a network |
SSIS |
SQL Server Integration Services |
Target Device |
a device which the Scan Engine is attempting to discover; defined by the user |
WMI |
Windows Management Instrumentation |
Oracle EULA
Technology Network Development and Distribution License Terms for Oracle Data Access Components
Export Controls on the Programs
Selecting the "Accept License Agreement" button is a confirmation of your agreement that you comply, now and during the trial term, with each of the following statements:
-You are not a citizen, national, or resident of, and are not under control of, the government of Cuba, Iran, Sudan, Libya, North Korea, Syria, nor any country to which the United States has prohibited export.
-You will not download or otherwise export or re-export the Programs, directly or indirectly, to the above mentioned countries nor to citizens, nationals or residents of those countries.
-You are not listed on the United States Department of Treasury lists of Specially Designated Nationals, Specially Designated Terrorists, and Specially Designated Narcotic Traffickers, nor are you listed on the United States Department of Commerce Table of Denial Orders.
You will not download or otherwise export or re-export the Programs, directly or indirectly, to persons on the above mentioned lists.
You will not use the Programs for, and will not allow the Programs to be used for, any purposes prohibited by United States law, including, without limitation, for the development, design, manufacture or production of nuclear, chemical or biological weapons of mass destruction.
EXPORT RESTRICTIONS
You agree that U.S. export control laws and other applicable export and import laws govern your use of the programs, including technical data; additional information can be found on Oracle®'s Global Trade Compliance web site (http://www.oracle.com/products/export).
You agree that neither the programs nor any direct product thereof will be exported, directly, or indirectly, in violation of these laws, or will be used for any purpose prohibited by these laws including, without limitation, nuclear, chemical, or biological weapons proliferation.
Oracle Employees: Under no circumstances are Oracle Employees authorized to download software for the purpose of distributing it to customers. Oracle products are available to employees for internal use or demonstration purposes only. In keeping with Oracle's trade compliance obligations under U.S. and applicable multilateral law, failure to comply with this policy could result in disciplinary action up to and including termination.
Note: You are bound by the Oracle Technology Network ("OTN") License Agreement terms. The OTN License Agreement terms also apply to all updates you receive under your Technology Track subscription.
The OTN License Agreement terms below supercede any shrinkwrap license on the OTN Technology Track software CDs and previous OTN License terms (including the Oracle Program License as modified by the OTN Program Use Certificate).
Oracle Technology Network Development and Distribution License Agreement for Oracle Data Access Client
"We," "us," and "our" refers to Oracle America, Inc. "You" and "your" refers to the individual or entity that wishes to use the Programs from Oracle under this Agreement. "Programs" refers to the Software Products referenced below that you wish to download and use and Program documentation. "License" refers to your right to use the Programs and Program documentation under the terms of this Agreement. The substantive and procedural laws of California govern this Agreement. You and Oracle agree to submit to the exclusive jurisdiction of, and venue in, the courts of San Francisco, San Mateo, or Santa Clara counties in California in any dispute arising out of or relating to this Agreement.
We are willing to license the Programs to you only upon the condition that you accept all of the terms contained in this Agreement. Read the terms carefully and select the "Accept" button at the bottom of the page to confirm your acceptance. If you are not willing to be bound by these terms, select the "Do Not Accept" button and the registration process will not continue.
Software Product
- Oracle Data Access Components
License Rights
License.
We grant you a non-exclusive right and license to use the Programs solely for your business purposes and development and testing purposes, subject to the terms of this Agreement. You may allow third parties to use the Programs, subject to the terms of this Agreement, provided such third party use is for your business operations only.
Distribution License
We grant you a non-exclusive right and license to distribute the Programs, provided that you do not charge your end users for use of the Programs. Your distribution of such Programs shall at a minimum include the following terms in an executed license agreement between you and the end user that: (1) restrict the use of the Programs to the business operations of the end user; (2) prohibit (a) the end user from assigning, giving, or transferring the Programs or an interest in them to another individual or entity (and if your end user grants a security interest in the Programs, the secured party has no right to use or transfer the Programs); (b) make the Programs available in any manner to any third party for use in the third party's business operations (unless such access is expressly permitted for the specific program license or materials from the services you have acquired); and (c) title to the Programs from passing to the end user or any other party; (3) prohibit the reverse engineering (unless required by law for interoperability), disassembly or decompilation of the Programs and prohibit duplication of the Programs except for a sufficient number of copies of each Program for the end user's licensed use and one copy of each Program media; (4) disclaim, to the extent permitted by applicable law, our liability for any damages, whether direct, indirect, incidental, or consequential, arising from the use of the Programs; (5) require the end user at the termination of the Agreement, to discontinue use and destroy or return to you all copies of the Programs and documentation; (6) prohibit publication of any results of benchmark tests run on the Programs; (7) require the end user to comply fully with all relevant export laws and regulations of the United States and other applicable export and import laws to assure that neither the Programs, nor any direct product thereof, are exported, directly or indirectly, in violation of applicable laws; (8) do not require us to perform any obligations or incur any liability not previously agreed to between you and us; (9) permit you to audit your end user's use of the Programs or to assign your right to audit the end user's use of the Programs to us; (10) designate us as a third party beneficiary of the end user license agreement; (11) include terms consistent with those contained in the sections of this Agreement entitled "Disclaimer of Warranties and Exclusive Remedies," "No Technical Support," "End of Agreement," "Relationship Between the Parties," and "Open Source"; and (11) exclude the application of the Uniform Computer Information Transactions Act.
You may allow your end users to permit third parties to use the Programs on such end user's behalf for the purposes set forth in the end user license agreement, subject to the terms of such agreement. You shall be financially responsible for all claims and damages to us caused by your failure to include the required contractual terms set forth above in each end user license agreement between you and an end user. We are a third party beneficiary of any end user license agreement between you and the end user, but do not assume any of your obligations thereunder, and you agree that you will not enter into any end user license agreement that excludes us as a third party beneficiary and will inform your end users of our rights.
If you want to use the Programs for any purpose other than as expressly permitted under this Agreement you must contact us to obtain the appropriate license. We may audit your use of the Programs. Program documentation is either shipped with the Programs, or documentation may be accessed online at http://docs.oracle.com/en/.
You agree to: (a) defend and indemnify us against all claims and damages caused by your distribution of the Programs in breach of this Agreement and/or failure to include the required contractual provisions in your end user agreement as stated above; (b) keep executed end user agreements and records of end user information including name, address, date of distribution and identity of Programs distributed; (c) allow us to inspect your end user agreements and records upon request; and, (d) enforce the terms of your end user agreements so as to effect a timely cure of any end user breach, and to notify us of any breach of the terms.
Ownership and Restrictions
We retain all ownership and intellectual property rights in the Programs. You may make a sufficient number of copies of the Programs for the licensed use and one copy of the Programs for backup purposes.
You may not:
-use the Programs for any purpose other than as provided above;
-charge your end users for use of the Programs;
-remove or modify any Program markings or any notice of our proprietary rights;
-assign this agreement or give the Programs, Program access or an interest in the Programs to any individual or entity except as provided under this agreement;
-cause or permit reverse engineering (unless required by law for interoperability), disassembly or decompilation of the Programs;
-disclose results of any Program benchmark tests without our prior consent.
Export
You agree that U.S. export control laws and other applicable export and import laws govern your use of the Programs, including technical data; additional information can be found on Oracle's Global Trade Compliance web site located at http://www.oracle.com/products/index.html. You agree that neither the Programs nor any direct product thereof will be exported, directly, or indirectly, in violation of these laws, or will be used for any purpose prohibited by these laws including, without limitation, nuclear, chemical, or biological weapons proliferation.
Disclaimer of Warranty and Exclusive Remedies
THE PROGRAMS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. WE FURTHER DISCLAIM ALL WARRANTIES, EXPRESS AND IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT.
IN NO EVENT SHALL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE OR CONSEQUENTIAL DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA OR DATA USE, INCURRED BY YOU OR ANY THIRD PARTY, WHETHER IN AN ACTION IN CONTRACT OR TORT, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR ENTIRE LIABILITY FOR DAMAGES HEREUNDER SHALL IN NO EVENT EXCEED ONE THOUSAND DOLLARS (U.S. $1,000).
No Technical Support
Our technical support organization will not provide technical support, phone support, or updates to you or end users for the Programs licensed under this agreement.
Restricted Rights
If you distribute a license to the United States government, the Programs, including documentation, shall be considered commercial computer software and you will place a legend, in addition to applicable copyright notices, on the documentation, and on the media label, substantially similar to the following:
NOTICE OF RESTRICTED RIGHTS
"Programs delivered subject to the DOD FAR Supplement are 'commercial computer software' and use, duplication, and disclosure of the programs, including documentation, shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement. Otherwise, programs delivered subject to the Federal Acquisition Regulations are 'restricted computer software' and use, duplication, and disclosure of the programs, including documentation, shall be subject to the restrictions in FAR 52.227-19, Commercial Computer Software-Restricted Rights (June 1987). Oracle Corporation, 500 Oracle Parkway, Redwood City, CA 94065."
End of Agreement
You may terminate this Agreement by destroying all copies of the Programs. We have the right to terminate your right to use the Programs if you fail to comply with any of the terms of this Agreement, in which case you shall destroy all copies of the Programs.
Relationship Between the Parties
The relationship between you and us is that of licensee/licensor. Neither party will represent that it has any authority to assume or create any obligation, express or implied, on behalf of the other party, nor to represent the other party as agent, employee, franchisee, or in any other capacity. Nothing in this Agreement shall be construed to limit either party's right to independently develop or distribute software that is functionally similar to the other party's products, so long as proprietary information of the other party is not included in such software.
Open Source
"Open Source" software - software available without charge for use, modification and distribution - is often licensed under terms that require the user to make the user's modifications to the Open Source software or any software that the user 'combines' with the Open Source software freely available in source code form. If you use Open Source software in conjunction with the Programs, you must ensure that your use does not: create, or purport to create, obligations of us with respect to the Oracle Programs; or (ii) grant, or purport to grant, to any third party any rights to or immunities under our intellectual property or proprietary rights in the Oracle Programs. For example, you may not develop a software program using an Oracle Program and an Open Source program where such use results in a program file(s) that contains code from both the Oracle Program and the Open Source program (including without limitation libraries) if the Open Source program is licensed under a license that requires any "modifications" be made freely available. You also may not combine the Oracle Program with programs licensed under the GNU General Public License ("GPL") in any manner that could cause, or could be interpreted or asserted to cause, the Oracle Program or any modifications thereto to become subject to the terms of the GPL.
Entire Agreement
You agree that this Agreement is the complete agreement for the Programs and licenses, and this Agreement supersedes all prior or contemporaneous Agreements or representations. If any term of this Agreement is found to be invalid or unenforceable, the remaining provisions will remain effective.
Should you have any questions concerning this License Agreement, or if you desire to contact Oracle for any reason, please write:
Oracle America, Inc.
500 Oracle Parkway,
Redwood City, CA 940
IBM EULA
iQuate (and resellers) make use of IBM supplied libraries in order to query DB2 and Informix database services. This involves the installation (on behalf of the customer) of supporting client libraries that expose Application Program Interfaces. The customer is still subject to normal licencing of the target software installation. The use of the API is a derived work based on sample programs provided by IBM. As required by IBM, the following copyright notice is provided to identify associated ownership of this API and derived software.
Additional information is available from IBM here: https://www.ibm.com/support/knowledgecenter/en/SSEPGG_11.1.0/com.ibm.swg.im.dbclient.adonet.doc/doc/c0010960.html
COPYRIGHT LICENSE:
This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM shall not be liable for any damages arising out of your use of the sample programs.
Each copy or any portion of these sample programs or any derivative work, must include a copyright notice as follows:
Portions of this code are derived from IBM Corp. Sample Programs.
© Copyright IBM Corp.2018. All rights reserved.
MongoDB Drivers
Copyright 2010-present MongoDB Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
This page left intentionally blank.