Certes have reviewed this vulnerability of the Log4j software package and we have determined that the CFNC software and the CEP software are not vulnerable.

The CEP software does not use this package or any java-based packages within the software.

The CFNC and TNM software do use this package, but the version installed is not vulnerable. All versions of CFNC use log4j-1.2.16. The versions that are impacted are Log4j2 versions 2.0-beta9 to 2.14.1. 

This includes all versions of CFNC/TNM and CEP software.

If you have any questions, please call the Customer Support line at: +1.888.277.8395 or +1.412.262.2571, option #2 or by email at: support@certesnetworks.com