Welcome
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content such as checks and checklists, which assess and manage devices to ensure compliance standards are met.
Security Compliance on BigFix UI
Security Compliance gives Security and Compliance administrators a live, environment-wide view of compliance posture across every Checklist deployed in the BigFix environment.
The checklist detail page
The checklist detail page opens when you click a checklist name on the landing page. It displays a breadcrumb, three KPI cards, and the compliance charts, all scoped to that checklist and to the global filter that was active when you opened it.

BigFix Documentation Homepage
BigFix 11 Compliance Documentation
Welcome to the BigFix Compliance documentation, where you can find information about how to install, maintain, and use BigFix Compliance.
BigFix Platform
BigFix Query
Compliance Overview
BigFix Compliance helps support endpoint security throughout your organization.
Compliance Guides in PDF format
Following is a list of links to the BigFix Compliance user guides in PDF format:
SCM Checklists Guide
This SCM Checklists page provides information about the compliance checklists supported by BigFix Compliance, including frameworks, supported platforms, and checklist versions.
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content such as checks and checklists, which assess and manage devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage the security configuration of devices using checklists, which includes creating custom checklists, customizing individual checks, synchronizing, and deploying checklists to devices.
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assesses and manages the device for security misconfiguration and deviation, which enables operators to deploy remediation actions to ensure the device meets compliance standards.
- Security Compliance on BigFix UI
  Security Compliance gives Security and Compliance administrators a live, environment-wide view of compliance posture across every Checklist deployed in the BigFix environment.
  - Overview
    Learn what the Security Compliance landing page shows and how its key capabilities help you monitor and act on compliance posture.
  - Before you begin
    Security Compliance reports only on Checklists that are already enabled in your environment. Complete the following prerequisites before you start:
  - The landing page
    The landing page is the default entry point. It displays the timestamp of when data was last updated, four KPI cards, and the Checklists grid. The Export and Filter icons are located in the top-right corner.
  - The checklist detail page
    The checklist detail page opens when you click a checklist name on the landing page. It displays a breadcrumb, three KPI cards, and the compliance charts, all scoped to that checklist and to the global filter that was active when you opened it.
    - Viewing chart data as a table
      Open the underlying values of any chart, then copy or export them.
    - The checks grid
      Below the charts, the Checks grid lists every Check in the Checklist with its current compliance data.
    - Deploying remediation for selected Checks
      Select several Checks from one Checklist and start a single deployment using the standard BigFix Deploy flow.
    - Exporting a checklist report
      Download the checks grid as data and the compliance charts as images or a PDF report.
    - Handling reports that take a long time to load
      Opening a checklist detail page with many Checks or Devices can take time. If it takes more than 15 seconds to load, Security Compliance offers to generate the report in the background so you can keep working.
  - Limitations in this release
    This release of Security Compliance reports on the current compliance state of your endpoints. Review the following limitations that are present in the current version.
Client Manager for Endpoint Protection
BigFix Compliance CMEP is an effective tool to monitor the deployment and health status of various Endpoint Protection products and provide quick remediation actions to recover needed endpoint protection.
BigFix Client Compliance
This guide describes the BigFix Client Compliance and its solutions (BigFix Client Compliance Configuration and BigFix Client Compliance Windows (IPSec Framework)) which helps in maintaining the compliance status of the computers.
Middleware Application Patching
Middleware Application Patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
RBI Compliance User Guide
Discover how the RBI Compliance Report provides a centralized and automated reporting solution for monitoring device and Fixlet compliance.
Technical References
Find technical reference material for BigFix® Compliance components. The topics in this section cover release notes, tool specifications, and version details for Compliance components, including Security Configuration Automation Protocol (SCAP), Security Compliance Analytics (SCA), and related tools.
BigFix Remediate
BigFix MCM
Glossary
This glossary provides terms and definitions for the BigFix® Compliance software and products.

The checklist detail page

The checklist detail page opens when you click a checklist name on the landing page. It displays a breadcrumb, three KPI cards, and the compliance charts, all scoped to that checklist and to the global filter that was active when you opened it.

The breadcrumb reads Security Compliance > <Checklist Name>.

Checklist detail page header with KPI cards — Figure 1. Checklist detail page header with KPI cards

KPI cards

Three cards show the number of Checks, Devices, and Device Groups for this Checklist. Click a card to open the corresponding listing page (Fixlet Explorer, Devices, or Device Groups) scoped to the Checklist.

Compliance charts

Compliance charts on the checklist detail page — Figure 2. Compliance charts on the checklist detail page


Chart	What it shows
Compliance	Donut chart showing the overall compliance percentage for the checklist.
Compliance by quartile (devices)	Bar chart of device counts in each compliance band: 0–24%, 25–49%, 50–74%, 75–99%, and 100%. The header shows the percentage of fully compliant devices.
Devices below compliance threshold	Donut chart of devices grouped by operating system. Enter a value in Threshold % to show only devices whose compliance is below that value. The default threshold is 80%. The chart resets to its default when you clear the field or reload the page.
Check Results	Donut chart showing the number of applicable checks, non-applicable checks, compliant results, and non-compliant results. Segments with a zero value are not drawn.
Compliance distribution by devices (%)	Line chart with compliance percentage on the X axis and number of devices on the Y axis.

Checks grid

Below the charts, the checklist detail page also includes the checks grid, listing every Check in the Checklist with its current compliance data. See The checks grid for its columns and controls.