Slides zum Impulsreferat: HCL BigFix - The endpoint management plattform | Tom Haab - HCL | DNUG Stammtisch Salzburg | 24.05.2023

1. Copyright © 2023 HCL Software Limited
HCL BigFix
The Endpoint
Management Platform

2. 2
Endpoint Security is a Universal Challenge
In 2023, there are
about 3.5 million
unfulfilled
cybersecurity jobs
Skills
shortage
Regulatory fines
can cost millions
for large global
brands
Compliance
mandates
Nearly 1/3 of all
detected
vulnerabilities
remain
unremediated
after a year
Long remediation
times
A typical
organization
uses 14 endpoint
management tools
Too many tools
And agents
No consolidated
single manage-
ment view of all
endpoints
increases security
risk
Lack of
visibility
Endpoint Security
is essential, but
challenging
“things” to secure personal data records stolen lost to cybercrime

3. 3
Top Reasons Customers Buy BigFix
Consolidate tools for reduced
cost, complexity and risk
Accelerate Zero Trust and
other security initiatives
Keep all endpoints
continuously patched and
compliant
Remediate vulnerabilities
faster to maintain business
continuity
Reduce annual software costs
while fostering use of current,
most secure, software versions
Securely Manage
“Work From Anywhere”
Initiatives
Industry’s Broadest Array of Automation
and Out-Of-The Box Content

4. 4
The Economic Impact of BigFix
Addressing endpoint management challenges drives tangible value
No consolidated single
Management view of
all endpoints increases
security risk
Lack of
visibility
In 2023, there are about
3.5 million unfulfilled
cybersecurity jobs
Skills
shortage
Regulatory fines can
cost millions for large
global brands
Compliance
mandates
Nearly 1/3 of all
detected vulnerabilities
remain unremediated
after a year
Long remediation
times
A typical organization
uses 14 endpoint
management tools
Too many tools
And agents
Endpoint
Management
Challenges
BigFix delivers
Economic Impact
One skillset leveraged
across all OS platforms
and device types
Simplified staffing,
fewer specialists
Reduced staffing
costs
Eliminates configuration
drift, remediation effort,
and noncompliance
fines
Continuous
compliance
enforcement
Fewer fines for
noncompliance
Prioritize and speed
vulnerability remediation
across the fleet of
endpoints
Fast remediation of
vulnerabilities
Reduce security risk
A single endpoint
management solution
reduces tool sprawl
and IT complexity
Single agent and
platform
Reduced IT spend
A unified view simplifies
management and
control and reduces
risk
Consolidated view
of all endpoints
Improve visibility
and control

5. Internet/Firewall Connected
Corporate/Remote Offices/
ATM/PoS/Desktops etc.
Real-time visibility, scalability, and ease of use
Lightweight infrastructure
• Use existing systems as relays
• Built-in redundancy
• Support / secure roaming endpoints
• Single Port (52311)
• API Servers for extension to Cloud and
Mobile
Cloud-based content delivery
• Highly extensible
• Automatic, on-demand
functionality
• 500K+ Published Fixlets.
• New content added daily + community.
(BigFix.me)
• To BigFix Server Only!
Single server and console
• Highly secure
and scalable
• Aggregates data,
analyzes and reports
• Pushes out pre-defined / custom
policies
• Can be on WAN or Cloud
Flexible policy language (Fixlets)
• Thousands of out-of-the-box policies
• Best practices for operations and security
• Simple custom policy authoring
• Highly extensible/applicable across all
platforms
• Use Relevance, PowerShell and others
Intelligent agent
• Performs multiple functions
• Continuous self-assessment and
policy enforcement
• Minimal system impact
(< 2% CPU)
• Approximately 15MB Ram
• API Registration
Content Repository
BigFix Server
Relay
WAN Connected
Relay
Open Architecture
• Rest API
• ServiceNow
• Qualys
• Tenable
• Carbon Black
• Ansible
• Rapid7
• Splunk, etc.
MCM API
MCM/API
Server(s)
Remote Users
Laptops / Mobile

6. New Challenge of 2023:
Blocking Threats Before the Attack
6
60%
of breaches occur because a patch was
available for known vulnerability but not
applied
60days
for an organization to remediate critical
vulnerabilities
<15days
for attackers to exploit a discovered
vulnerability
IT Ops needs to get ahead
of the latest threats
Align IT with security
Automate Vulnerability
Remediation

7. 7
Endpoint Management for Every Part of Your Organization
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction

8. 8
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Improve
management and
control of end user
computing devices
including laptops,
desktops, phones
and tablets while
enabling
self-service IT.
Provides
• Total User Workspace
Management
• User self-service
• User experience management
• CyberFOCUS Analytics
• Fast Vulnerability remediation
• Enforced compliance
• Remote desktop control
BigFix Lifecycle
BigFix Compliance
BigFix Mobile
Endpoint Management for Every Part of Your Organization

9. 9
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Endpoint Management for Every Part of Your Organization
Provides
• Effective patch management
• Intelligent server automation
• OS updates and deployment
• CyberFOCUS Analytics
• Continuous compliance
• Remote control
• Ready-to-deploy content
BigFix Lifecycle
BigFix Compliance
Improves security
and control of on-
prem and cloud
servers running
Windows, UNIX and
Linux using a single
comprehensive
management
platform.

10. Endpoint Management for Every Part of Your Organization
10
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Optimizing software
cost management
through inventorying
licenses, tracking
usage and delivering
audit-ready reports.
Provides
• Software catalog with
100,000+ titles
• Software usage reporting
• Identification of over
deployed titles
• Identification and optional
removal of risky and
unauthorized software
BigFix Inventory

11. Endpoint Management for Every Part of Your Organization
11
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Aligns of security and
operations to remediate
vulnerabilities faster,
ensure compliance
across the enterprise and
better manage security
and risk across all
endpoints in the
enterprise.
Provides
• Insights for Vuln Remediation
• CISA KEV Analyzer
• MITRE APTs Vuln Simulator
• Protection Level Agreements
BigFix Lifecycle
BigFix Compliance
BigFix Remediate
BigFix Resolve

12. 12
BigFix CyberFOCUS Technology
The industry’s first vulnerability
remediation solution that combines threat
intelligence-based CVE prioritization,
prescriptive analytics and the broadest
device coverage to help organizations
stay protected ahead of emerging
threats.

13. 13
Typical Vulnerability Remediation using current tools
Vulnerability Remediation using BigFix
Current
• IT is at the end of the
process
• Research and Fixes are
manual tasks taking
weeks
• Management activities
organized by OS
• Remediations are
prioritized manually
• WEEKS / MONTHS
BigFix
• Automates correlation and research
• Automates Fixlet creation
• Activities are OS-independent
• Speeds patching and vulnerability remediation
• Allows IT Ops to stay ahead of the threat
• HOURS / DAYS

14. 14
BigFix Insights for Vulnerability Remediation

15. 15
BigFix Compliance
Enables organizations to achieve continuous compliance
of security and regulatory policies effectively
Continuous assessment
Continuously assesses each endpoint’s
security configurations to get real-time
compliance status
Modern Client Management
Extends visibility and control to
Windows 10 and macOS endpoints
using a modern approach
Insights for Vulnerability Remediation
Correlates vulnerabilities discovered by
3rd party tools with BigFix remediation
content to bridge the Sec/Ops gap
Endpoint Protection Management
Monitors deployment health of various
endpoint protection tools and
remediates deployment issues quickly
Rich Policy Contents
20,000+ Out-of-the-box checks for
60+ operating systems and
middleware applications based
on CIS, DISA STIG and PCI
Automatic Remediation
Automatically remediates
configuration drifts to re-enforce
policy and reduce attack surface
Comprehensive Analytics &
Reporting
Assesses and reports on current
status and historical trend of security
configuration, patch and vulnerability
postures
Add Shadow

16. 16
Insights for Vulnerability Remediation
Correlates vulnerabilities discovered by
3rd party tools with BigFix remediation
content to bridge the Sec/Ops gap
Modern Client Management
Extends visibility and control to
Windows 10 and macOS endpoints
using a modern approach
Provision
• OS provisioning
• Bare metal & OS re-imaging
• Complex application deployment
Service
• Secure remote control
• From any endpoint to any endpoint
(over the internet)
• BigFix in-place upgrade (windows
upgrade)
Manage
• Software distribution
• Patch management
• Configuration and Patch
• Power Management
• End user self-service application
• Task sequencing and automation
e.g. clustered server patching
Analyze
An open data analytics platform
providing insights, historical and trend
reports
Secure
• Continuous configuration
compliance
• Secure computer disposal (disk
overwrite NIST)
BigFix Lifecycle
Enables organizations to discover, manage and support
devices of all types
Add Shadow

17. 17
Identify unused software
Usage reports to identify systems
where software can be removed to
reduce security exposures
Identify unmanaged software
Inventory data and newly discovered
system reports to verify if assets are
properly managed or unauthorized.
Identify unmanaged software
Whitelist/Backlist filtering of inventory
data to identify systems where
unauthorized software is deployed or
unauthorized processes are running
Reduce overspending
Detailed, real-time, current inventory
and usage reports to eliminate under
used or unnecessary licenses and
reduce maintenance costs
Reduce audit risk and cost
• Identify unlicensed computers.
• Associate software inventory with
hardware data to avoid software
license exposures
Reduce true-up costs
Accurate inventory data in support of
purchasing and procurement tools and
processes
BigFix Inventory
Maintain software audit readiness and mitigate security risks with
software compliance and usage management
Add Shadow

18. BigFix Remediate
Extends the power of BigFix Patch with the industry’s fastest vulnerability remediation to
align security and IT operations and shrink the enterprise attack surface
Multiplatform patch
Patch nearly 100 different operating
systems and variants with one platform
Insights for Vulnerability Remediation
Correlates vulnerabilities from Tenable
and Qualys to bridge the Sec/Ops gap
and reduce attack surface
CyberFOCUS analytics
• Advanced Persistent Threat (APT)
Mapping and a Vulnerability
Remediation Simulator
• CISA Known Exploited Vulnerability
Exposure Analyzer
• Protection Level Agreements
Fixlet library
More than 500,000 Fixlets are
available on bigfix.com with more
being added daily.
Extended patch content
Ready-to-deploy patch content for
popular 3rd party application
developed and tested by HCL BigFix
Add Shadow

19. BigFix Mobile
Modern Management for a Mobile Workforce
Enroll
Enroll corporate or BYOD devices with
Zero touch or end user initiated Over-
the-air enrollment.
Manage
• Easily manage several hundred OS
configuration settings and
applications
• Easily deploy Applications from
Google Playstore and Apple
Appstore
Service
Remotely wipe, or lock a lost or stolen
device to protect corporate data, and
provide an on-screen message so that
it can be retrieved
Secure
Set passcode policies, restrictions
policies, OS update policies or
manage application blacklist and
whitelisting, camera and print
settings, etc. Retire
Easily decommission corporate
applications and data on personal
devices that are no longer authorized

20. 20
A Recognized Leader
Gartner Peer Insights for UEM Quadrant Knowledge Systems

21. BigFix Technology Alliance Program
Certified integrations support by HCL and the partner

22. 22
Top Reasons Partners Engage BigFix
Increased Productivity =
Increased Profitability
On Demand Technical
Enablement and Sales Support
Thought Leadership to Align
IT and Security
New, Profitable
Implementation, XaaS and
MSP Services
Management Consulting for
Protection Level Agreements
Scales to all size customers
and industries