Welcome to the BigFix Blog, where you can read the perspectives from network and service assurance experts. This Blog provides insights into the endpoint management solution, as well as technical details about specific IBM products.
We expect to publish Fixlets for the localized versions of the October 2011 security patches by Thursday (13 Oct 2011) evening Pacific Time. We will post an update on this blog once the content for non-English versions of Patches for Windows Fixlet sites is published.
Hey guys, We have released our new BigFix Labs domain to the world! BigFix Labs is a special domain, which every deployment has free access to, that contains a bunch of cool/interesting/useful experimental features, such as the relevance builder and Local User Management. We will continue to update and add more features to Labs, but note that all the content is UNSUPPORTED. Use at your own risk. See our preview post for some more info. We've added Labs to everyone's license bundles. This means that you should see a message like this at the... [More]
Security Configuration Management (SCM) for Unix Systems The Security and Compliance team at IBM has modified the content within the UNIX System checklists to add per user ignore for the following controls: AIX 5.3 & 6.1 GEN000800 GEN000540 GEN000620 GEN000600a GEN000580 GEN000680 GEN000700 RHEL 4 & 5 GEN000540 GEN000700 Solaris 8, 9 & 10 GEN000540 ---- Site Versions ---- Self-Parameterizing Sites: DISA STIG Checklist for AIX 5.1 v7 DISA STIG Checklist for AIX 5.2 v6 DISA STIG Checklist for AIX 5.3 v6 DISA STIG Checklist for AIX... [More]
Now that labs is released to the world , I'll be spending some more time highlighting some of the cooler features we've included, as well as anything we will add in the future. Today's feature: Client Relevance Builder! The BigFix Relevance language is an immensely powerful and versatile tool, and is one of the main reasons BigFix is so capable a platform. There is a downside to this: if you want to start making custom Fixlet content to get the full potential out of your deployment, you have to learn this new language, which not... [More]
There is a document created listing all the supported endpoint protection products for CMEP at this wiki page: https://www.ibm.com/developerworks/mydeveloperworks/wikis/home?lang=en#/wiki/Tivoli%20Endpoint%20Manager/page/Client%20Manager%20for%20Endpoint%20Protection%20%E2%80%93%20Supported%20Products It will be updated once a support for a new product is published.
We've just released our first of many updates to Labs. Featured in this release: Relay Cache Management! One of the keys to BigFix great scalability is our awesome relay infrastructure and file caching system. This lets our agents download files directly from their parent relays over fast LAN connections, saving tons of time and bandwidth. The relay caches mostly take care of themselves, however sometimes you want to more detailed control over your cache, to save space on disk, to make sure large or critical files are not kicked out of... [More]
Just a heads up, our tenative delivery times for this upcoming Patch Tuesday are 2:00PM PST for all patches. We'll release non-English security patches shortly afterwards. You can find more information about the upcoming November Patch Tuesday here: http://technet.microsoft.com/en-us/security/bulletin/ms11-nov
Just wanted to let you guys know that our Patch Tuesday fixlets for November 2011 are live. They hit the world roughly forty minutes ago. We also published the re-release of MS11-037 as part of that push. We'll be working next on the non-English Patch Tuesday fixlets.
We just published the Fixlets for Patches for Windows sites for German, Japanese and Chinese (Simplified) languages. The Patch Tuesday content for the remaining language sites should be available by Wednesday evening PST.
We've released another cool new dashboard to labs today: Bandwidth Throttling! BigFix natively offers the ability to throttle the amount of bandwidth machines will use when communicating with its parents or children, within the BigFix relay hierarchy. This is great for deployments that have constrained network connections. Simply throttle your client or relay download speeds, and you can prevent your 56k connection from being overwhelmed, while still keeping your clients responsive and up to date. However as users of this feature... [More]
Hello Security and Compliance Community! IBM
is pleased to announce the availability of the new security configuration
management checklists for Tivoli Endpoint Manager for Security and Compliance! The new checklists based on guidance provided by the Defense Information
Systems Agency (DISA – US DoD) and the Federal Desktop Core Configuration
(FDCC) are: - SCM
Checklist for DISA STIG on SUSE 9 (Action Script based parameterization) - SCM
Checklist for DISA STIG on SUSE 11 (Action Script based parameterization) - DISA
Just a quick post on some of the setup and configuration changes you can expect in version 8.2. On upgrade, all existing Console users will be migrated to local users. Console users will be asked to provide .pvk files on initial login for the purposes of verification only and will not be used for subsequent login attempts. Consoles in 8.2 connect to the Server through HTTPS 52313. This replaces the previous method of ODBC connections. This is configurable. Account provisioning is now handled by the Console, not the BESAdmin tool. However,... [More]
Just wanted to give everyone a heads up that we are in the process of reviewing and updating our fixlets. The good news is that these changes will have a positive impact on your environments by reducing the size of the fixlets while maintaing all of the same function. As we progress I will post to the blog which fixlets are being updated each day. We will begin rolling out these changes next week, updating between 4-6 sites a day.