Welcome
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
BigFix Insights for Vulnerability Remediation (IVR) v.4
This module provides comprehensive guidance on the installation, maintenance, and operation of the IVR v.4 service. It includes a detailed summary of the entire end-to-end workflow for using IVR v.4.
System requirements
Learn more about the prerequisites and system requirements for the BigFix IVR v.4 Retriever service.

BigFix Documentation Homepage
Platform Documentation
Patch Documentation
Insights Documentation
The Insights feature of BigFix 10 provides you with advanced analytics and visualizations that you can use to identify risks in your environment and make appropriate business decisions.
CVE Search dashboard and Web Report
BigFix CVE Search dashboard and Web Report are available as part of a new Vulnerability Reporting site.
CyberFOCUS Analytics dashboard
From the BigFix CyberFOCUS Analytics dashboard, you can view various reports that display critical information related to vulnerabilities. The data are represented in the form of graphs and tables, so that the user can quickly become aware of the IT assets and the threats in the environment and take informed decisions to mitigate vulnerabilities.
ServiceNow Data Flow
This module provides an overview and features of BigFix ServiceNow Data Flow.
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
- BigFix Insights for Vulnerability Remediation (IVR) v.4
  This module provides comprehensive guidance on the installation, maintenance, and operation of the IVR v.4 service. It includes a detailed summary of the entire end-to-end workflow for using IVR v.4.
  - Product overview
    This module provides comprehensive guidance on the installation, maintenance, and operation of the IVR v.4 service. It includes a detailed summary of the entire end-to-end workflow for using IVR v.4.
  - System requirements
    Learn more about the prerequisites and system requirements for the BigFix IVR v.4 Retriever service.
  - IVR4 Fixlets
    Learn more about available Fixlets and tasks for BigFix Insights for Vulnerability Remediation v.4.
  - IVR v.4 setup process
    This section provides information on setting up the IVR v.4.
  - Setting up WebUI IVR v.4 app
    This section provides information on setting up the IVR application, remediation from the main vulnerability list page, remediation from the Vulnerability page, and exporting the vulnerability list.
  - IVR on-prem reset
    If you need to restart the configuration setup from scratch, use the reset option.
  - Configuration settings for IVR on-prem
    Below are configurations for the IVR v.4 on-prem application. If you want to change any of them, stop the application, modify the configuration settings and then start the application.
  - IVR v.4 logs
    This section provides information about the IVR v.4 logs.
  - Release notes
    The release notes outline the features, updates and patches that are included in each version of BigFix Insights for Vulnerability Remediation v.4, including the latest application updates.
  - Known limitations
    Refer to the below list of limitations in IVR v.4:
- BigFix Insights for Vulnerability Remediation (IVR)
  Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
Extended third-party Windows Applications
Updates for Windows Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party Mac Applications
Updates for Mac Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Known Exploited Vulnerabilities Content Pack (Add-on)
Remediate Guides in PDF
Following is a link to the BigFix Remediate user guide in PDF format:

System requirements

Learn more about the prerequisites and system requirements for the BigFix IVR v.4 Retriever service.

Software requirements


Software requirements
BigFix component requirements	BigFix WebUI IVR App (v15) (minimum)
Prerequisites	MSSQL 2019 or MSSQL 2022
Operating system	Microsoft Windows 2016 Microsoft Windows 2019  Microsoft Windows 2022
Supported BigFix versions	Windows-based BigFix Server, v10 or higher version Note: The BigFix IVR Retriever service does not currently support non-Windows-based BigFix Server environments.
BigFix License Requirements	BigFix Remediate BigFix Lifecycle BigFix Compliance BigFix Workspace / Workspace BigFix Enterprise / Enterprise+
Supported vulnerability management platforms	Tenable Vulnerability Management (formerly known as Tenable.IO) Note: It is required to use the administrator user role within Tenable to enable the generation of API keys that are used by IVR to maintain the interface with Tenable. Tenable Security Center (formerly known as Tenable.sc) Tenable assets that will be correlated with their BigFix computer id must be applicable for any of these Tenable Plugin ids: 55817 - HCL BigFix Client Installed (Windows) 159575 - HCL BigFix Client Installed (Linux) 159628 - HCL BigFix Client Installed (macOS)
Network requirements	BES IVR Retriever Service: Inbound on port 9011 by default Inbound on port 8099 during the setup process Listens internally on localhost for these ports 9012, 9013, 9014, 9015 by default Connectivity to Tenable Vulnerability Management API Server URL (outbound via port 443 by default) Connectivity to SQL database (outbound via port 1433 by default) BigFix Server (outbound via port 52311 by default) BigFix WebUI Server (outbound via port 443 by default) Note: Note: All network ports are TCP and can differ from the default implementation.
System limitations	Only one type of source of vulnerability data for ingestion is supported

Hardware requirements


Hardware requirements
CPU	Minimum 2 cores (recommended 4 cores)
RAM	In addition to the host OS requirements: 2GB per 20K endpoints
Disk space	With default settings, expect this sizing: 4GB per 20K endpoints
Execution Time	The overall run time of data synchronization and processing depends on: CPU Speed Number of findings Number of assets Number of patch sites loaded within the BFE environment API latency Conflicting workloads on the IVR machine