Ditto. Many of us want to know BMC's stance on keeping up with a number of the 3rd party products they either ship or support.
LJ and I had a bit of a discussion in Upgrade AI to latest release of Pentaho Spoon <https://communities.bmc.com/ideas/2499>. That Idea is specifically about Pentaho but it applies to reporting, web services, etc. I agree with LJ that staying up with the latest available product just to be on the latest and greatest isn't appropriate or needed however in many cases we see the version gaps continually grow as years go by. Many Times as Patrick noted with vulnerabilities that are not acceptable in an organization or support was dropped by the vendor completely (and why the vulnerabilities are never addressed). With one product my team supports we have not been able to use Java newer than 1.4. In the newest release (released in 2013) that was updated to Java 1.5 which hasn't been updated since 2009 and is full of vulnerabilities that will never be addressed. And yes this product runs a Jetty web server so it is exposed on the network beyond just local Java processes. Our Infosec team wants to have a talk with this vendor to see why they don't appear to take security serious when providing what they claim is an enterprise class application. This could be a factor in deciding if we are going to continue using their products. BMC, don't be our next vendor that needs to meet with our Infosec team. Jason On Wed, Feb 12, 2014 at 5:36 AM, patrick zandi <[email protected]> wrote: > ** > > > *BusinessObjects Enterprise XI 3.1 Server is no longer supported and > beyond EOL according to SAP.. * > > > *Where is BMC standing on this discussion.. * > > > On Tue, Feb 11, 2014 at 7:36 PM, David Ferguson <[email protected] > > wrote: > >> ** >> Yurbi has an out of the box integration with ARS 8.1 that provides a >> codeless approach to creating reports and dashboards and an easy way to >> integrate the Remedy data with any other datasource. We just made a few >> enhancements described here - >> http://www.5kfish.com/blogs/exciting-enhancements-to-yurbi-for-bmc-remedy-v9-12-25-2/ >> On the first image on the left you can see all the modules we have >> pre-built but you can add any customizations through the interface. >> >> thanks, >> >> David >> >> >> On Tue, Feb 11, 2014 at 5:48 PM, Schon, Stuart < >> [email protected]> wrote: >> >>> ** >>> >>> Xtraction is also a viable reporting and Dashboard product. Fast with >>> lots of features. Built in integration with Remedy. >>> >>> >>> >>> >>> >>> >>> *Stuart Schon Service Desk Systems - ManagerFujitsu Australia Limited* >>> >>> *From:* Action Request System discussion list(ARSList) [mailto: >>> [email protected]] *On Behalf Of *patrick zandi >>> *Sent:* Wednesday, 12 February 2014 6:55 AM >>> *To:* [email protected] >>> *Subject:* Re: [EXTERNAL] reporting methods for ARS 8.1 >>> >>> >>> >>> ** >>> >>> Thank you bruce.. >>> >>> >>> >>> On Tue, Feb 11, 2014 at 10:54 AM, Bruce - Gmail <[email protected]> >>> wrote: >>> >>> ** >>> >>> I thought the BO xi 3.1 r2 sp5.3 should allow java 1.7 to be used? >>> >>> Sent from my iPhone >>> >>> >>> On Feb 11, 2014, at 7:39 AM, patrick zandi <[email protected]> wrote: >>> >>> ** >>> >>> There are 4 strategies for reporting : CR, BOA, Birt, Adhoc that I know >>> of - an yes I could create my own with a UT Custom. >>> >>> Of those it appears most are old and or have security issues - old >>> java:: >>> >>> business objects xi 3.1 crystal reports 2011 -- Requires 2008 Max 32 bit >>> only, and is old and some newer JAVA versions do not run with it (which >>> makes it insecure) and at some places they will not allow it to run - due >>> to security risk (it is really old) >>> >>> Analytics: while the 7.6.04 version and 8.0 version can be installed you >>> can only us certain versions of JAVA and some of those are EOL -- or you >>> pay for extended support. you cannot run dynamic reports either, from the >>> mid-tier it is a on demand version (login to web client or login to server >>> and use thick client). You can email and post to sharepoint on a timed >>> basis. >>> >>> Birt is using version 2.5 (but newer versions 4.5? I think is out) but >>> BMC is only compatible with 2.5 >>> >>> Adhoc: yup just a bunch of data points. >>> >>> BMC : appears weak for either integration or continued reporting with >>> models that are forward looking and security conscience. CR 2013 is out >>> but cannot use it. >>> >>> Am I incorrect in some of these observations? Could someone tell me >>> that CR 3.1 is passing their NESSUS scans and JAVA can be 1.7.X or 1.8.X ? >>> How about CR 2013 server -- is there any future that BMC will allow >>> reporting from this? How are people handling the WEB and press a button to >>> get reports? Birt? >>> >>> Just asking... >>> >>> >>> >>> On Mon, Feb 10, 2014 at 5:34 PM, Stroud, Natalie K <[email protected]> >>> wrote: >>> >>> ** >>> >>> I am unclear what question you are asking, Patrick. Are you asking >>> which reporting methods compatible with 8.1 are the most secure/security >>> compliant? >>> >>> >>> >>> Thanks, >>> >>> >>> >>> *Natalie Stroud* >>> >>> SAIC @ Sandia National Laboratories >>> >>> ARS-ITSM Reporting Specialist >>> >>> Albuquerque, NM USA >>> >>> [email protected] >>> >>> ITSM 7.6.04 SP2 - Windows 2003 - SQL Server 2008 >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> *From:* Action Request System discussion list(ARSList) [mailto: >>> [email protected]] *On Behalf Of *patrick zandi >>> *Sent:* Monday, February 10, 2014 1:47 PM >>> *To:* [email protected] >>> *Subject:* [EXTERNAL] reporting methods for ARS 8.1 >>> >>> >>> >>> ** >>> >>> CR 2008 server (old and most likely not security compliant) -- is there >>> anything newer that is compatible? >>> >>> Analytics (that cannot do reports from the web like CR just >>> email/sharepoint - and login) and is close to not being security compliant >>> (JAVA VERSIONS). >>> >>> BIRT (older version 2.5 -- but not the latest ) Again security problems? >>> >>> Adhoc (yuk) >>> >>> Anyone got any good answers? >>> >>> >>> -- >>> Patrick Zandi >>> >>> _ARSlist: "Where the Answers Are" and have been for 20 years_ >>> >>> _ARSlist: "Where the Answers Are" and have been for 20 years_ >>> >>> >>> >>> >>> -- >>> Patrick Zandi >>> >>> _ARSlist: "Where the Answers Are" and have been for 20 years_ >>> >>> _ARSlist: "Where the Answers Are" and have been for 20 years_ >>> >>> >>> >>> >>> -- >>> Patrick Zandi >>> >>> _ARSlist: "Where the Answers Are" and have been for 20 years_ >>> _ARSlist: "Where the Answers Are" and have been for 20 years_ >>> >> >> >> >> -- >> >> >> *David A. Ferguson* >> Work: 571-354-0515 >> Fax: 702-974-2704 >> Email: [email protected] >> Website: http://www.5kfish.com >> >> >> >> >> <http://www.linkedin.com/in/davferg> >> >> >> _ARSlist: "Where the Answers Are" and have been for 20 years_ >> > > > > -- > Patrick Zandi > _ARSlist: "Where the Answers Are" and have been for 20 years_ > _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"
