2025-220 - Laserfiche WebLink

Home Browse Search

B. SUMS PRODUCT Features Summary. i. The Seller will use reasonable efforts to monitor pertinent governmental, vendor, independent and open -source databases for PVAs, IAVAs, STIGs and for any subsequent resolutions that affect products provided by the Seller that are part of the Subscriber's Designated System. ii. The Seller will make every reasonable effort to verify that the PVA, IAVA, and STIG resolutions, Vendor Patches, and/or Vendor Workarounds, do not adversely affect the Seller's stated performance of the Subscriber's Designated System. iii. The Seller will provide Security Update Distributions to the Subscriber at periodic intervals targeting bi-monthly releases. The interval shall be determined solely by the Seller. More frequent Security Update Distributions may be required to address urgent product security vulnerabilities. Security Update Distributions on other than a bi-monthly basis does not constitute a contractual default by the Seller. iv. The Seller will provide Security Update Distributions in a means suitable for use on the target devices of the Subscriber's Designated System. Optional On -Site Support Services may be contracted by the Subscriber, outside of this Agreement, through the Seller or the Seller's RCE or Network Solutions Provider or designated local service provider as set forth in Section 6.A. iv. V. Prior to the general release by Seller of any Security Updates, Seller shall make available a SUMS PRODUCT release document announcing the impending release, and detailing its contents and impact, if any, on any other Seller hardware or Software components. Subscriber acknowledges that older hardware may not have sufficient capacity for the operation of the Software Updates. NOTHING IN THIS AGREEMENT OR OTHERWISE REQUIRES SELLER EITHER TO DESIGN UPDATES THAT REMAIN COMPATIBLE WITH DESIGNATED SYSTEM HARDWARE OR TO PROVIDE ADDITIONAL HARDWARE UNDER THIS AGREEMENT, AND SUBSCRIBER WAIVES ANY SUCH DUTY OR OBLIGATION BY SELLER vi. The Seller will provide with each Security Update Distribution a Security Release Notes document. This document will detail the PVA resolutions and/or mitigation addressed by this release, installation and installation recovery procedures and software and hardware compatibility information where applicable. vii. Automated Security Update Distribution Services. The Seller will provide a means of automating the distribution of Security Updates to the target devices within the Subscriber's Designated System. Subscriber shall be responsible for providing the necessary hardware and licenses to run the automated distribution of Security Updates. This hardware shall be part of Subscriber's Designated L3Harris System or purchased at Subscriber's expense from Seller prior to the initialization of this Software Services Agreement. As set forth in Section 9.C. of this Agreement, it shall be the Subscriber's responsibility to complete the security update process on the target devices (e.g., rebooting the target devices) following the Patch Application instructions in the Release Notes accompanying each Security Update Distribution. Optional On -Site Support Services may be contracted by the Subscriber, outside of this Agreement, through the Seller or the Seller's RCE or Network Solutions Provider or designated local service provider as set forth in Section 6.A.iv. viii. Assessment Reporting. For those PVAs monitored by the Seller as stated in Section 4.B.h., the Seller will provide responses assessing the effects of the monitored PVAs on the LMR system and stating Seller's recommendations for required actions. Access to the PVA assessments will be granted through Tech -Link, a restricted web site maintained by the Seller. The Seller does not guarantee assessment response time but will make reasonable efforts to provide timely assessment responses. 26