Summary

This article describes how Flexera checks for export compliance?

Question

How does FlexNet Operations Cloud check for export compliance when a user attempts to download a file or license?

Answer

We use the MK Denial lists for Member name and Account Name matches. Any matches are completely blocked from downloading.

If the Member/Account checks have been passed, we move on to the other checks, which involve the export classification of the Product and the Country from the combined requester information.The requester Country is obtained from several sources:

1. Member address profile
2. Email address top level domain (ex. member@company.com.uk is UK)
3. Reverse lookup of domain (top level) for requesting IP address.

From these three sources, the most restricted country is compared to the distribution privileges for the Product. Based on this comparison the download is either allowed or blocked.

For example:

• Member is not on any of the MK Denial lists
• The member profile country is USA
• The email address is member@company.com.ca
• The IP reverse lookup resolved to a ".cn" domain
• The product classification allows for distribution to USA, CA and EU+8 countries

Based on:

• USA (member profile) - export would be allowed for this product
• CA (email address top level domain) - export would be allowed for this product
• CN (resolved IP address top level domain) - export would DENIED for this product

End result:

• This member would not be allowed to download this product
• It would be denied due to the IP address for a domain in China
• The product is not allowed to be exported to China