Welcome
Technical References
Find technical reference material for BigFix® Compliance components. The topics in this section cover release notes, tool specifications, and version details for Compliance components, including Security Configuration Automation Protocol (SCAP), Security Compliance Analytics (SCA), and related tools.
SCAP Release Notes
Use this page to find information about the releases of BigFix® Compliance Security Configuration Automation Protocol (SCAP) tools, including certification details, new features, bug fixes, and SHA256 checksums for released files.

BigFix Documentation Homepage
BigFix 11 Compliance Documentation
Welcome to the BigFix Compliance documentation, where you can find information about how to install, maintain, and use BigFix Compliance.
BigFix Platform
BigFix Query
Compliance Overview
BigFix Compliance helps support endpoint security throughout your organization.
Compliance Guides in PDF format
Following is a list of links to the BigFix Compliance user guides in PDF format:
SCM Checklists Guide
This SCM Checklists page provides information about the compliance checklists supported by BigFix Compliance, including frameworks, supported platforms, and checklist versions.
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content such as checks and checklists, which assess and manage devices to ensure compliance standards are met.
Client Manager for Endpoint Protection
BigFix Compliance CMEP is an effective tool to monitor the deployment and health status of various Endpoint Protection products and provide quick remediation actions to recover needed endpoint protection.
BigFix Client Compliance
This guide describes the BigFix Client Compliance and its solutions (BigFix Client Compliance Configuration and BigFix Client Compliance Windows (IPSec Framework)) which helps in maintaining the compliance status of the computers.
Middleware Application Patching
Middleware Application Patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
RBI Compliance User Guide
Discover how the RBI Compliance Report provides a centralized and automated reporting solution for monitoring device and Fixlet compliance.
Technical References
Find technical reference material for BigFix® Compliance components. The topics in this section cover release notes, tool specifications, and version details for Compliance components, including Security Configuration Automation Protocol (SCAP), Security Compliance Analytics (SCA), and related tools.
- SCAP Release Notes
  Use this page to find information about the releases of BigFix® Compliance Security Configuration Automation Protocol (SCAP) tools, including certification details, new features, bug fixes, and SHA256 checksums for released files.
  - SCAP 1.2
    Use this page to find information about the releases of BigFix® Compliance Security Configuration Automation Protocol (SCAP) 1.2 tools, including certification details, supported platforms, and SHA256 checksums for released files.
  - SCAP 1.3
    Use this page to find information about the releases of BigFix® Compliance Security Configuration Automation Protocol (SCAP) 1.3 tools, including certification details, new features, resolved issues, and SHA256 checksums for released files.
- SCA Release Notes
  Use this page to find information about the releases of BigFix® Compliance Security Compliance Analytics (SCA), including new features, enhancements, fixed issues, and upgrade instructions.
BigFix Remediate
BigFix MCM
Glossary
This glossary provides terms and definitions for the BigFix® Compliance software and products.

SCAP Release Notes

Use this page to find information about the releases of BigFix® Compliance Security Configuration Automation Protocol (SCAP) tools, including certification details, new features, bug fixes, and SHA256 checksums for released files.

Overview & Certification

Important: BigFix® Compliance has successfully achieved SCAP 1.3 certification under the NIST SCAP Validation Program (Validation Number 148). This certification aligns BigFix with the latest NIST specifications and ensures continued compliance with federal and industry security automation standards. For more information, see the NIST SCAP Validation Program.

Important: Configure your anti-virus software and firewall to allow the executable files that are used by the SCAP tools. These files start processes when you import checklists or generate reports. Blocking these files causes the import and report operations to fail.

The SCAP tool files are located at the following path on the console:

[Path_to_Console]/Sites/SCM Reporting