Creating a new BigFix Client Compliance document

Use BigFix Client Compliance Policy Wizard to create a new policy document and deploy policy to one or more computer or client endpoints.

Procedure

  1. Login to BigFix console and select BigFix Management from the list of available domains.
  2. To access BigFix Client Compliance Policy Wizard, select External Sites > BigFix Client Compliance Configuration > Wizards > BigFix Client Compliance Policy Wizard from the navigation tree.
  3. In the Welcome to the Client Compliance Policy Wizard tab, select Deploy an existing BigFix Compliance Document and click Next.
  4. In the Set Name and Applicable Machines tab, provide the required information such as Name, operating system and click Next.
    Note: The relevance expression is auto generated based on the operating system and other parameters.


  5. In the Set Basic Quarantine Settings tab, check the required settings from the list, define its parameter and click Next. For example, check Maximum number of relevant critical patches and define its parameter.
  6. In the Set Anti-Virus Quarantine Settings tab, check the required antivirus application from the list, define its maximum age in day(s) and click Next.
  7. In the Custom Compliance Checks tab, users can try various options to Create Custom Compliance Check such as:
    1. user can add a new custom compliance checks
    2. user can edit the existing custom compliance checks
    3. user can view the existing custom compliance checks
    4. user can remove the existing custom compliance checks
    and click save and then click Finish on the Custom Compliance Checks tab.



  8. In the Security Warning dialog window, click Continue.
  9. Use the Create in site and Create in domain drop-down to select the site and domain, and click OK.

Results

A new policy document is created as a task in the selected site and this task will become relevant when the computer in site matches the parameters defined in the policy.

For more information on deploying the tasks to the computer, see Deploying a task to the computer.