From 1571f7cd38aeb8b1ca82de459a68c13aad23d672 Mon Sep 17 00:00:00 2001
From: Eldar Gazizov <eldar_gazizov@rapid7.com>
Date: Tue, 11 Jun 2024 13:58:23 +0200
Subject: [PATCH 1/2] VC-2316 Added Fingerprinting for Ivanti Pulse Secure

---
 xml/snmp_sysdescr.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index c0d25152..364f8464 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -3582,6 +3582,20 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="0" name="os.device" value="Printer"/>
   </fingerprint>
 
+  <!--======================================================================
+                            Ivanti (Pulse Secure)
+   =======================================================================-->
+
+  <fingerprint pattern="^Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,(\d+\.\d+R\d+(?:\.\d+)?) \(build .*\)$">
+    <description>Pulse Secure, LLC, Ivanti Connect Secure</description>
+    <example os.version="22.3R1">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R1 (build 1647)</example>
+    <example os.version="22.3R2.1245">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
+    <param pos="0" name="os.certainty" value="0.99"/>
+    <param pos="0" name="os.vendor" value="Pulse Secure"/>
+    <param pos="0" name="os.product" value="Pulse Connect Secure"/>
+    <param pos="1" name="os.version"/>
+  </fingerprint>
+
   <!--======================================================================
                               Juniper
    =======================================================================-->

From d19ad5077b379346340ef9bcea452fa2832bb255 Mon Sep 17 00:00:00 2001
From: Eldar Gazizov <eldar_gazizov@rapid7.com>
Date: Wed, 12 Jun 2024 15:57:34 +0200
Subject: [PATCH 2/2] VC-2316 Improved regex that detect both vendors name

---
 xml/snmp_sysdescr.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index 364f8464..fdb5b5a0 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -3586,10 +3586,12 @@ Copyright (c) 1995-2005 by Cisco Systems
                             Ivanti (Pulse Secure)
    =======================================================================-->
 
-  <fingerprint pattern="^Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,(\d+\.\d+R\d+(?:\.\d+)?) \(build .*\)$">
+  <fingerprint pattern="^(?:Pulse Secure, LLC|Ivanti Connect Secure),.*,(\d+\.\d+R\d+(?:\.\d+)?) \(build \d+\)$">
     <description>Pulse Secure, LLC, Ivanti Connect Secure</description>
     <example os.version="22.3R1">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R1 (build 1647)</example>
     <example os.version="22.3R2.1245">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
+    <example os.version="22.3R1">Pulse Secure, LLC,ISA-V,22.3R1 (build 1647)</example>
+    <example os.version="22.3R2.1245">Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
     <param pos="0" name="os.certainty" value="0.99"/>
     <param pos="0" name="os.vendor" value="Pulse Secure"/>
     <param pos="0" name="os.product" value="Pulse Connect Secure"/>