Welcome to the BigFix Blog, where you can read the perspectives from network and service assurance experts. This Blog provides insights into the endpoint management solution, as well as technical details about specific IBM products.
It is a well-known statement in the endpoint security field that the only way to protect a device, aka endpoint, from malicious attacks is to keep it switched off. This method, though very effective, is not very practical. Therefore a different solution is required for endpoints that are attacked and compromised. The best way to cope with potential exposures and security risks is to avoid an incident to occur in the first place (Prevent). However, prevention itself has demonstrated not to be bulletproof. Therefore, if an attack is successfully... [More]
IBM announces the availability of Interim Fix Pack 2 for IBM Endpoint Manager for Remote Control 9.0.0. The content in the Tivoli Remote Control Site has been modified to support the release of the new Interim Fixpack 2 for IBM Endpoint Manager for Remote Control 9.0.0. The full build number for Interim Fix Pack 2 is 9.0.0.0205. Modified Fixlet Messages: - The deployment tasks have been updated to install the Interim Fixpack 2 components. - The upgrade tasks have been updated to upgrade the installed components to the Interim Fixpack 2 version.... [More]
Do not register iOS7 devices into IEM for Mobile Devices until ALL iOS extenders in your environment have been upgraded to version 9.0.40039, which was released on September 3rd, in site version 73. Any iOS 7 device that connects to an iOS Management Extender earlier than version 9.0.40039 will cause a larger than normal load on that management extender, resulting in severe performance degradation. Please upgrade your iOS Management Extenders using Fixlet id 94, "Upgrade Management Extender for Enrollment and Apple iOS... [More]
IBM Tivoli Endpoint Manager for Security and Compliance Security Configuration Management (SCM) ***Announcement*** New Synchronization Wizard for Custom Checklists IBM is pleased to announce a new wizard for owners of the Security and Compliance product in the Endpoint Manager family. This Custom Checklist Synchronization wizard allows an administrator to easily synchronize a custom security checklist with the IBM-provided checklist that was used as the source material. In the past an administrator could not easily update custom checklists... [More]
Hello Security and Compliance Community! IBM
is pleased to announce the availability of the new security configuration
management checklists for Tivoli Endpoint Manager for Security and Compliance! The new checklists based on guidance provided by the Defense Information
Systems Agency (DISA – US DoD) and the Federal Desktop Core Configuration
(FDCC) are: - SCM
Checklist for DISA STIG on SUSE 9 (Action Script based parameterization) - SCM
Checklist for DISA STIG on SUSE 11 (Action Script based parameterization) - DISA
Please join us at Pulse 2013, which will be held March 3-6 in Las Vegas. Pulse 2013 will feature today’s hottest topics, including Cloud, Mobility, Security and Smarter Physical Infrastructure, to demonstrate how IBM can help you optimize your business infrastructure and deliver ultimate business value. Discover the latest IBM products and solutions and hear real-life experiences from IBM clients who have improved the economics of their business infrastructures while delivering innovative products and services to their customers. Register... [More]
In case you guys missed it, the rest of the bulletins for this Patch Tuesday ended up going out roughly at 3AM PST. The version of the site should be 1550. At this point all the bulletin content for Dec 2011 should be out there. We're working next on the non-English content. When that's gone out we'll post back here again.
Content in the Patches for Windows (English) Fixlet Site has been released. New Fixlet Messages: Fixlet messages for Microsoft Security Bulletins: MS13-001 ** MS13-002 MS13-003 * MS13-004 MS13-005 ** MS13-006 ** MS13-007 * The noted bulletins are not included in this publishing. Completion of the content is coming. ** The noted bulletins have been published in update 1. Reason for Update: Microsoft has released 7 Security Bulletins for January 2013. Actions to Take: None Published site version: Patches for Windows (English), version 1702... [More]
We just released the first set of Patch Tuesday patches for October 2011. They should all be included in version 1529 of the Enterprise Security site. This first set includes content for: MS11-075 MS11-076 MS11-077 MS11-080 MS11-081 The rest of the patches are scheduled to be delivered around 9:30PM PST.
IBM Tivoli Endpoint Manager for Security and Compliance Security Configuration Management (SCM) The Security and Compliance team at IBM has updated the BES Asset Discovery and SCM Reporting site for enhancements. SCM Reporting --- site version 40: * Enhancement: "Synchronize Custom Checks" Wizard: - New functionality to detect removals and deletions of checks in external checklists - Targeted content syncing: An external checklist (source) is compared to a custom checklist (destination) for synchronization ... [More]
Hi All, Lately, we have seen an increased adoption of Microsoft Forefront, so we recently added support for Microsoft Forefront Endpoint Protection to our Client Manager for Endpoint Protection (CMEP) Fixlet site. Customers can now use CMEP to support the following Microsoft Forefront management tasks: - Report on agent health (running, stopped) - Report on client information (definition versions, engine version, client status, etc) - Deploy definition updates via the Microsoft Forefront Update Wizard - Enforce a policy that monitors the... [More]
It’s been said that an ounce of prevention is worth a pound of cure. That’s great advice — unless you’re the one who needs the cure! Such is the case for those who’ve been infected with the Bash Bug. It doesn’t take more than a quick web search to understand the severity of the bug. There is a lot of focus on prevention—which is great advice and something definitely worth listening to. But there’s not a lot of information about the cure—until now. Join our Unified Endpoint Management experts... [More]
We are pleased to announce the support for Solaris Live Upgrade. We have released a new site called “Patches for Solaris Live Upgrade”, which contains Fixlets for patching Solaris inactive boot environments. Supported Solaris Versions: - Solaris 9 - Solaris 10 - Solaris 10x86 Type of Patches: - Oracle Recommended patches - Oracle Security patches - Oracle Critical Patch Updates (CPU) Supported Versions of IBM Endpoint Manager: IBM Endpoint Manager 8.0 and later Refer to the... [More]