SMS Open Source Information The TippingPoint license for the SMS was included in your SMS shipment. To request additional copies of the license, contact TippingPoint customer service. This product includes software licensed under the GNU General Public License and/or the GNU Lesser General Public License (such software, the "Software"). Source code for some of this Software may be obtained from the TMC. Any other Software used under this license may be obtained by sending a source code request identifying the product and model to 11305 Alterra Pkwy, Austin, TX 78758 accompanied by a check to Trend Micro Incorporated for $20. A copy of the GPLv2.0 license is available here: GPLv2.0 License. A copy of the LGPLv2.1 license is available here: LGPLv2.1 License. This product includes software licensed under an open source software license other than the GNU General Public License and the GNU Lesser General Public License. To the extent Trend Micro has an obligation or, in its sole discretion, chooses to make the source code for such software available under the applicable open source software license, source code for the software may be obtained by sending a source code request identifying the product and model to 11305 Alterra Pkwy, Austin, TX 78758. The TippingPoint SMS uses open source components. Many open source license agreements require user documentation to contain notification that the open source software is included in the product. Trend Micro Incorporated acknowledges that the following open source components may be used in this product: • This product includes software developed by the JDOM Project, http://www.jdom.org/ Copyright (C) 2001 Brett McLaughlin & Jason Hunter. All rights reserved. • This product includes software developed by the Apache Software Foundation, http://www.apache.org/ Copyright (c) 1999 The Apache Software Foundation. All rights reserved. A copy of the Apache 2.0 License is available here: Apache 2.0 License • This product includes software developed by the Exchange project, http://www.javaexchange.com/ Copyright (c) 1996, Marc A. Mnich, All rights reserved. • This product includes software developed by Quest Software, http://www.quest.com/ Copyright (c) 1997-2009, Quest Software. All rights reserved. • This product includes code licensed from RSA Data Security.

Security Management System Open Source Information 1 • This product includes software developed by JIDE Software, Inc. Copyright (c) 2002 - 2012 JIDE Software, Inc, all rights reserved. • This product includes map tile data provided by OpenStreetMap, http://www.openstreetmap.org Copyright (c) OpenStreetMap contributors, CC-BY-SA • This product includes GeoLite data created by MaxMind, available from http://www.maxmind.com/ • This product includes software developed by XStream Committers Copyright (c) 2003-2006, Joe Walnes Copyright (c) 2006-2007, XStream Committers All rights reserved. • This product includes software developed by InMon Corporation, available from http://www.inmon.com/ technology/sflowTools.php Copyright © 1999-2014 InMon Corp. • This product includes software developed by SkySQL Corporation, available from https://mariadb.com/ Copyright (c) 2012-2014, SkySQL Corporation • This product includes software developed by VMware, Inc., available from http://www.vmware.com/ Detailed license information can be obtained from https://my.vmware.com/web/vmware/details? downloadGroup=VMTOOLS1005_OSS&productId=491 Copyright (c) 2016, VMware, Inc. All rights reserved. Additional software components listed by license: • Apache Version 2.0 Components ◦ BeanUtils ◦ Apache Commons Codec ◦ Apache Commons Compress ◦ Apache Commons HttpClient ◦ Apache Commons IO ◦ Apache Commons Lang ◦ Apache Struts ◦ ◦ Guava ◦ Hibernate Validator ◦ iText ◦ JBoss Application Server ◦ log4jdbc ◦ Quartz Scheduler

2 Security Management System Open Source Information ◦ SNMP4J ◦ SNMP4J-Agent ◦ SwingX-WS ◦ SSHJ • Apache Version 1.1 Components ◦ Jakarta ORO ◦ JDom • BSD-Style License Components ◦ Ganymed SSH-2 ◦ Java Hamcrest ◦ JZLib ◦ Net-SNMP ◦ OpenSSH ◦ Rhino ◦ XStream ◦ MariaDB • Creative Commons Attribution-ShareAlike Version 2.0 Components ◦ OpenStreetMap data and tiles • GNU Lesser General Public License Version 3.0 Components ◦ j-Interop ◦ JasperReports • GNU Lesser General Public License Version 2.1 Components ◦ GeoIP Java API ◦ iText ◦ JBoss Application Server ◦ JCIFS ◦ JNA ◦ JRadius

Security Management System Open Source Information 3 ◦ MariaDB ◦ NSS ◦ SwingX ◦ Swingx-ws ◦ Syslog4j • GNU General Public License (GPL) Version 2.0 Components ◦ Anaconda ◦ CentOS ◦ MariaDB ◦ MySQL-Python ◦ NSS ◦ OpenJDK ◦ Rhino ◦ socat • Java Components ◦ JDK • JDOM Components ◦ JDom • MIT Style Components ◦ pyodbc ◦ Bouncy Castle • Mozilla Public License Version 1.1 Components ◦ iText ◦ NSS ◦ Rhino • ODC Open Database License (ODbL) Components ◦ OpenStreetMap • OpenSSL License

4 Security Management System Open Source Information ◦ OpenSSL • Python License (Python-2.0) Components ◦ MySQL-Python ◦ setuptools • SFlowToolkit License ◦ sflowtoolkit • SSLeay License ◦ OpenSSL • WTFPL Components ◦ reflections • Zope Public License Version 2.0 (ZPL-2.0) Components ◦ MySQL-Python ◦ setuptools Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. Disclaimer: THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Security Management System Open Source Information 5