Understanding the output of deploy and Run task
With Windows content, endpoint scans are accomplished by a series of Windows powershell scripts that provide greater accessibility to Windows system administrators.
In BigFix, Fixlets continuously evaluate conditions on each endpoint, displaying results in the console when their relevance clauses of the Fixlets evaluate to true or false. For Windows systems, the "Deploy and Run Task" within a Security Checklist initiates a scan of the endpoints. This scan can be executed on an ad hoc basis whenever a scan is required or configured as a recurring policy from the console.
The endpoint scan is carried out by various Windows powershell scripts available within the Deploy and Run tasks. These scripts write the information to an output file, which is then used by the corresponding Fixlet checks for evaluation. Once the results files are written to disk, the Fixlets read the output and display the results in the console.
C:\Program Files (x86)\BigFix
Enterprise\BES Client\__BESData\__SCMData, which contains several
components as detailed below:| CIS_secpol.txt | This output file stores security policies of particular CIS Fixlets. |
| DISA_secpol.txt | This output file stores security policies of particular DISA Fixlets. |
| Universal_secpol.txt | This output file stores security policies of particular Universal Checklist Fixlets. |