Welcome
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content such as checks and checklists, which assess and manage devices to ensure compliance standards are met.
Security Compliance on BigFix UI
Security Compliance gives Security and Compliance administrators a live, environment-wide view of compliance posture across every Checklist deployed in the BigFix environment.
The landing page
The landing page is the default entry point. It displays the timestamp of when data was last updated, four KPI cards, and the Checklists grid. The Export and Filter icons are located in the top-right corner.

BigFix Documentation Homepage
BigFix 11 Compliance Documentation
Welcome to the BigFix Compliance documentation, where you can find information about how to install, maintain, and use BigFix Compliance.
BigFix Platform
BigFix Query
Compliance Overview
BigFix Compliance helps support endpoint security throughout your organization.
Compliance Guides in PDF format
Following is a list of links to the BigFix Compliance user guides in PDF format:
SCM Checklists Guide
This SCM Checklists page provides information about the compliance checklists supported by BigFix Compliance, including frameworks, supported platforms, and checklist versions.
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content such as checks and checklists, which assess and manage devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage the security configuration of devices using checklists, which includes creating custom checklists, customizing individual checks, synchronizing, and deploying checklists to devices.
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assesses and manages the device for security misconfiguration and deviation, which enables operators to deploy remediation actions to ensure the device meets compliance standards.
- Security Compliance on BigFix UI
  Security Compliance gives Security and Compliance administrators a live, environment-wide view of compliance posture across every Checklist deployed in the BigFix environment.
  - Overview
    Learn what the Security Compliance landing page shows and how its key capabilities help you monitor and act on compliance posture.
  - Before you begin
    Security Compliance reports only on Checklists that are already enabled in your environment. Complete the following prerequisites before you start:
  - The landing page
    The landing page is the default entry point. It displays the timestamp of when data was last updated, four KPI cards, and the Checklists grid. The Export and Filter icons are located in the top-right corner.
    - The checks workflow in Fixlet Explorer
      Open Security Compliance, narrow its scoped list of checks to the ones you care about, and start a deployment.
    - Filtering the view
      Use the global filter to scope the KPI cards and the Checklists grid by Checks, Checklists, Devices, or Device Groups.
    - Saving and reusing a filter
      Save a filter combination under a name so that you can reload it in one click, and mark filters as favorites for quick access.
    - Exporting landing page data
      Download the Checklists grid as a CSV or Excel file.
  - The checklist detail page
    The checklist detail page opens when you click a checklist name on the landing page. It displays a breadcrumb, three KPI cards, and the compliance charts, all scoped to that checklist and to the global filter that was active when you opened it.
  - Limitations in this release
    This release of Security Compliance reports on the current compliance state of your endpoints. Review the following limitations that are present in the current version.
Client Manager for Endpoint Protection
BigFix Compliance CMEP is an effective tool to monitor the deployment and health status of various Endpoint Protection products and provide quick remediation actions to recover needed endpoint protection.
BigFix Client Compliance
This guide describes the BigFix Client Compliance and its solutions (BigFix Client Compliance Configuration and BigFix Client Compliance Windows (IPSec Framework)) which helps in maintaining the compliance status of the computers.
Middleware Application Patching
Middleware Application Patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
RBI Compliance User Guide
Discover how the RBI Compliance Report provides a centralized and automated reporting solution for monitoring device and Fixlet compliance.
Technical References
Find technical reference material for BigFix® Compliance components. The topics in this section cover release notes, tool specifications, and version details for Compliance components, including Security Configuration Automation Protocol (SCAP), Security Compliance Analytics (SCA), and related tools.
BigFix Remediate
BigFix MCM
Glossary
This glossary provides terms and definitions for the BigFix® Compliance software and products.

The landing page

The landing page is the default entry point. It displays the timestamp of when data was last updated, four KPI cards, and the Checklists grid. The Export and Filter icons are located in the top-right corner.

Security Compliance landing page with KPI cards and the Checklists grid — Figure 1. Security Compliance landing page with KPI cards and the Checklists grid

KPI cards


Card	Shows	On click
Checklists	Number of Checklists in scope.	No navigation. The Checklists are already listed in the grid below.
Checks	Total number of Checks (Fixlets) across all Checklists in scope.	Opens the Fixlet Explorer list view scoped to those Checks.
Devices	Devices subscribed to at least one Checklist in scope.	Opens the Devices list scoped to those devices.
Device Groups	Device groups that contain at least one device subscribed to a Checklist in scope.	Opens the Device Groups list scoped to those groups.

Checklists grid

One row per deployed Checklist, with the following columns:


Column	Description
Name	Checklist name. Click it to open the Checklist detail page. If no devices are subscribed to the Checklist (Computer Count is 0), the name is not clickable and is displayed as plain text instead of a link.
ID	BigFix site ID of the Checklist.
Policy	Predefined report that groups compliance results across Checklists. Every Checklist belongs to SCM Checklists by default; this is the universal policy and includes all Checklists automatically, including out-of-the-box PCI DSS Checklists. If the PCI Add-on is licensed and the PCI DSS Reporting site is enabled, PCI DSS Checklists can also feed three additional policies: PCI DSS Requirements View, PCI DSS Milestones View, and PCI DSS Checklists (custom PCI DSS Checklists only). Policies are not user-configurable; you cannot create a custom policy. See PCI DSS policies for what each policy includes.
Check Count	Number of Checks in the Checklist.
Computer Count	Number of computers subscribed to the Checklist.

Use the search box to find a Checklist by name, and click a column header to sort.
Click Column to choose which columns are displayed.
The grid shows 10 rows by default. Click More at the bottom-right to load the rest.
If no Checklists are deployed, the grid shows No checklists found. Deploy a checklist to get started. If a filter excludes everything, it shows No checklists match the active filter. Adjust your filter to see results.