Slides zum Impulsreferat: HCL BigFix - The Endpoint Management Platform | Tom Haab - HCL | DNUG Stammtisch Hamburg | 06.09.2023

1. Copyright © 2023 HCL Software Limited
HCL BigFix
The Endpoint
Management Platform

2. Endpoint Security is a Universal Challenge
In 2023, there are
about 3.5 million
unfulfilled
cybersecurity jobs
Skills
shortage
Regulatory fines
can cost millions
for large global
brands
Compliance
mandates
Nearly 1/3 of all
detected
vulnerabilities
remain
unremediated
after a year
Long remediation
times
A typical
organization
uses 14 endpoint
management tools
Too many tools
And agents
No consolidated
single manage-
ment view of all
endpoints
increases security
risk
Lack of
visibility
Endpoint Security
is essential, but
challenging
“things” to secure personal data records stolen lost to cybercrime

3. The Economic Impact of BigFix
Addressing endpoint management challenges drives tangible value
No consolidated single
Management view of
all endpoints increases
security risk
Lack of
visibility
In 2023, there are about
3.5 million unfulfilled
cybersecurity jobs
Skills
shortage
Regulatory fines can
cost millions for large
global brands
Compliance
mandates
Nearly 1/3 of all
detected vulnerabilities
remain unremediated
after a year
Long remediation
times
A typical organization
uses 14 endpoint
management tools
Too many tools
And agents
Endpoint
Management
Challenges
BigFix delivers
Economic Impact
One skillset leveraged
across all OS platforms
and device types
Simplified staffing,
fewer specialists
Reduced staffing
costs
Eliminates configuration
drift, remediation effort,
and noncompliance
fines
Continuous
compliance
enforcement
Fewer fines for
noncompliance
Prioritize and speed
vulnerability remediation
across the fleet of
endpoints
Fast remediation of
vulnerabilities
Reduce security risk
A single endpoint
management solution
reduces tool sprawl
and IT complexity
Single agent and
platform
Reduced IT spend
A unified view simplifies
management and
control and reduces
risk
Consolidated view
of all endpoints
Improve visibility
and control

4. Endpoint Management for any device: Desktop to Server to Cloud to Mobile
Discovery and Enrollment
Hardware and Software Inventory for over 100k titles
Fully automate operations for any endpoint
• Distribution
• Hardening
• Patch
• Compliance
Desktop, Server, Cloud and Mobile
End User Self-Service
Remote Desktop Control
Power Management
Integrations with 12+ Market Leading Products including
ServiceNow, Tenable, Qualys, QRadar and more
Correlates vulnerabilities from Tenable and Qualys
to bridge the Sec/Ops gap and reduce attack surface
Continuous Compliance and Patch
PCI-DSS, DISA-Stig, CIS Compliance
Eliminate Configuration Drift
Software Lic Compliance Reporting
Insights: Open Data Analytics Platform
Historical & Trend Reporting, Analytics
Over 100 OS’s with
major versions
World’s leading endpoint management
platform used on over 100,000,000 systems
Worldwide Discover
Inventory
Intelligent
Automation
Manage
Integrate
Vulnerability
Remediation
Compliance
Analyze

5. HCL BigFix Platform
DMZ
Bandwidth
Management
across
MPLS,
T1,
Cable/DSL,
ISDN,
56K
and
Satellite
Bandwidth
Management
across
Cable/DSL,
3G/4G/LTE
and
Wi-Fi
BigFix Content Delivery
Remote Offices / PoS /ATM
Corporate / Data Centers / Cloud
Cloud (AWS, Google, Azure)
WAN HCL BigFix
Management
Internet
Managed remote assets
VPN
500K+
published fixlets. New content added daily + community
250K+
Endpoints per BigFix Server
90+
Operating Systems + Versions
Minimal system Impact
< 2% CPU load
Single Port
TCP / UDP 52311
BigFix Relay
can be any endpoint with sufficient resources

6. New Challenge of 2023:
Blocking Threats Before the Attack
60%
of breaches occur because a patch was
available for known vulnerability but not
applied
60days
for an organization to remediate critical
vulnerabilities
<15days
for attackers to exploit a discovered
vulnerability
IT Ops needs to get ahead
of the latest threats
Align IT with security
Automate Vulnerability
Remediation

7. Endpoint Management for Every Part of Your Organization
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction

8. Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Improve
management and
control of end user
computing devices
including laptops,
desktops, phones
and tablets while
enabling
self-service IT.
Provides
• Total User Workspace
Management
• User self-service
• User experience management
• CyberFOCUS Analytics
• Fast Vulnerability remediation
• Enforced compliance
• Remote desktop control
BigFix Lifecycle
BigFix Compliance
BigFix Mobile
Endpoint Management for Every Part of Your Organization

9. Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Endpoint Management for Every Part of Your Organization
Provides
• Effective patch management
• Intelligent server automation
• OS updates and deployment
• CyberFOCUS Analytics
• Continuous compliance
• Remote control
• Ready-to-deploy content
BigFix Lifecycle
BigFix Compliance
Improves security
and control of on-
prem and cloud
servers running
Windows, UNIX and
Linux using a single
comprehensive
management
platform.

10. Endpoint Management for Every Part of Your Organization
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Optimizing software
cost management
through inventorying
licenses, tracking
usage and delivering
audit-ready reports.
Provides
• Software catalog with
100,000+ titles
• Software usage reporting
• Identification of over
deployed titles
• Identification and optional
removal of risky and
unauthorized software
BigFix Inventory

11. Endpoint Management for Every Part of Your Organization
Support for 100 operating
systems and variants
Integrations with ServiceNow, Tenable,
Qualys, Nutanix, IBM, VMWare, AWS,
Google Cloud, Azure and others
User Workspace
Management
Deep automation for clients
and mobile to easily solve the
latest user endpoint demands
in the market
Secure Infrastructure
Automation
Intelligent automation
of servers and cloud assets
Security & risk management
compliance
Software Asset
Management
Software cost management
License optimization
Software auditing
CyberFOCUS Security
Management
Help alignment of security
and operations
Help C-suite balance
security and business
Prove cyber risk reduction
Aligns of security and
operations to remediate
vulnerabilities faster,
ensure compliance
across the enterprise and
better manage security
and risk across all
endpoints in the
enterprise.
Provides
• Insights for Vuln Remediation
• CISA KEV Analyzer
• MITRE APTs Vuln Simulator
• Protection Level Agreements
BigFix Lifecycle
BigFix Compliance
BigFix Remediate
BigFix Resolve

12. Typical Vulnerability Remediation using current tools
Vulnerability Remediation using BigFix
Current
• IT is at the end of the
process
• Research and Fixes are
manual tasks taking
weeks
• Management activities
organized by OS
• Remediations are
prioritized manually
• WEEKS / MONTHS
BigFix
• Automates correlation and research
• Automates Fixlet creation
• Activities are OS-independent
• Speeds patching and vulnerability remediation
• Allows IT Ops to stay ahead of the threat
• HOURS / DAYS

13. BigFix Insights for Vulnerability Remediation

14. BigFix Offerings Comparison
Key Capabilities BigFix
Patch
BigFix
Lifecycle
BigFix
Compliance
BigFix
Remediate
BigFix
Inventory
BigFix One
on Cloud
Comprehensive patching ✓ ✓ ✓ ✓ ✓
Pre-built and tested OS patch content ✓ ✓ ✓ ✓ ✓
Extended catalog of 3rd party apps for Windows ✓ ✓ ✓ ✓
Vulnerability remediation with CyberFOCUS Analytics ✓ ✓ ✓ ✓
Data analytics/integration platform ✓ ✓ ✓
Software and OS distribution and updates ✓ ✓
Server automation / task sequencing ✓ ✓
Desktop control and energy management ✓ ✓
Configuration checklists for CIS, PCI-DSS, and DIST STIG
containing more than 20,000 checks
✓ ✓
Continuous compliance policy enforcement ✓ ✓
Security configuration management ✓ ✓
Multi-vendor anti-malware management ✓ ✓
Hardware inventory ✓ ✓
Software inventory with catalog of 100,000+ titles ✓ ✓

15. BigFix Compliance
Enables organizations to achieve continuous compliance
of security and regulatory policies effectively
Continuous assessment
Continuously assesses each endpoint’s
security configurations to get real-time
compliance status
Modern Client Management
Extends visibility and control to
Windows 10 and macOS endpoints
using a modern approach
Insights for Vulnerability Remediation
Correlates vulnerabilities discovered by
3rd party tools with BigFix remediation
content to bridge the Sec/Ops gap
Endpoint Protection Management
Monitors deployment health of various
endpoint protection tools and
remediates deployment issues quickly
Rich Policy Contents
20,000+ Out-of-the-box checks for
60+ operating systems and
middleware applications based
on CIS, DISA STIG and PCI
Automatic Remediation
Automatically remediates
configuration drifts to re-enforce
policy and reduce attack surface
Comprehensive Analytics &
Reporting
Assesses and reports on current
status and historical trend of security
configuration, patch and vulnerability
postures

16. Insights for Vulnerability Remediation
Correlates vulnerabilities discovered by
3rd party tools with BigFix remediation
content to bridge the Sec/Ops gap
Modern Client Management
Extends visibility and control to
Windows 10 and macOS endpoints
using a modern approach
Provision
• OS provisioning
• Bare metal & OS re-imaging
• Complex application deployment
Service
• Secure remote control
• From any endpoint to any endpoint
(over the internet)
• BigFix in-place upgrade (windows
upgrade)
Manage
• Software distribution
• Patch management
• Configuration and Patch
• Power Management
• End user self-service application
• Task sequencing and automation
e.g. clustered server patching
Analyze
An open data analytics platform
providing insights, historical and trend
reports
Secure
• Continuous configuration
compliance
• Secure computer disposal (disk
overwrite NIST)
BigFix Lifecycle
Enables organizations to discover, manage and support
devices of all types

17. Identify unused software
Usage reports to identify systems
where software can be removed to
reduce security exposures
Identify unmanaged software
Inventory data and newly discovered
system reports to verify if assets are
properly managed or unauthorized.
Identify unmanaged software
Whitelist/Backlist filtering of inventory
data to identify systems where
unauthorized software is deployed or
unauthorized processes are running
Reduce overspending
Detailed, real-time, current inventory
and usage reports to eliminate under
used or unnecessary licenses and
reduce maintenance costs
Reduce audit risk and cost
• Identify unlicensed computers.
• Associate software inventory with
hardware data to avoid software
license exposures
Reduce true-up costs
Accurate inventory data in support of
purchasing and procurement tools and
processes
BigFix Inventory
Maintain software audit readiness and mitigate security risks with
software compliance and usage management

18. BigFix Remediate
Extends the power of BigFix Patch with the industry’s fastest vulnerability remediation to
align security and IT operations and shrink the enterprise attack surface
Multiplatform patch
Patch nearly 100 different operating
systems and variants with one platform
Insights for Vulnerability Remediation
Correlates vulnerabilities from Tenable
and Qualys to bridge the Sec/Ops gap
and reduce attack surface
CyberFOCUS analytics
• Advanced Persistent Threat (APT)
Mapping and a Vulnerability
Remediation Simulator
• CISA Known Exploited Vulnerability
Exposure Analyzer
• Protection Level Agreements
Fixlet library
More than 500,000 Fixlets are
available on bigfix.com with more
being added daily.
Extended patch content
Ready-to-deploy patch content for
popular 3rd party application
developed and tested by HCL BigFix

19. BigFix Mobile
Modern Management for a Mobile Workforce
Enroll
Enroll corporate or BYOD devices with
Zero touch or end user initiated Over-
the-air enrollment.
Manage
• Easily manage several hundred OS
configuration settings and
applications
• Easily deploy Applications from
Google Playstore and Apple
Appstore
Service
Remotely wipe, or lock a lost or stolen
device to protect corporate data, and
provide an on-screen message so that
it can be retrieved
Secure
Set passcode policies, restrictions
policies, OS update policies or
manage application blacklist and
whitelisting, camera and print
settings, etc. Retire
Easily decommission corporate
applications and data on personal
devices that are no longer authorized

20. A Recognized Leader
Gartner Peer Insights for UEM Quadrant Knowledge Systems

21. BigFix Technology Alliance Program
Certified integrations support by HCL and the partner