From d19ad5077b379346340ef9bcea452fa2832bb255 Mon Sep 17 00:00:00 2001
From: Eldar Gazizov <eldar_gazizov@rapid7.com>
Date: Wed, 12 Jun 2024 15:57:34 +0200
Subject: [PATCH] VC-2316 Improved regex that detect both vendors name

---
 xml/snmp_sysdescr.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index 364f8464..fdb5b5a0 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -3586,10 +3586,12 @@ Copyright (c) 1995-2005 by Cisco Systems
                             Ivanti (Pulse Secure)
    =======================================================================-->
 
-  <fingerprint pattern="^Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,(\d+\.\d+R\d+(?:\.\d+)?) \(build .*\)$">
+  <fingerprint pattern="^(?:Pulse Secure, LLC|Ivanti Connect Secure),.*,(\d+\.\d+R\d+(?:\.\d+)?) \(build \d+\)$">
     <description>Pulse Secure, LLC, Ivanti Connect Secure</description>
     <example os.version="22.3R1">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R1 (build 1647)</example>
     <example os.version="22.3R2.1245">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
+    <example os.version="22.3R1">Pulse Secure, LLC,ISA-V,22.3R1 (build 1647)</example>
+    <example os.version="22.3R2.1245">Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
     <param pos="0" name="os.certainty" value="0.99"/>
     <param pos="0" name="os.vendor" value="Pulse Secure"/>
     <param pos="0" name="os.product" value="Pulse Connect Secure"/>