View the Effective Configuration of Managed Endpoints in BigFix Application Control

Use Analyses: Effective Configuration in the BigFix Console to inspect the active configuration applied to each endpoint managed by BigFix Application Control. The Details tab displays seven data points per endpoint: Control Mode, Blocked Path Patterns Rules, Blocked Hashes Rules, Allowed Path Pattern Rules, Allowed Hash Rules, active Exceptions, and BESBAC Service Status.

About this task

Use Analyses: Effective Configuration to identify the current configuration applied to each endpoint managed by BigFix Application Control.

The Analyses: Effective Configuration view in the BigFix Console provides a per-endpoint snapshot of the active policy state, allowing administrators to verify that the correct control mode and rules are in effect and that the BESBAC service is running on each managed endpoint.

From the Details tab under the Analysis: Effective Configuration pane, you can view the following data for all managed endpoints:
  • Control Mode — the active allowlisting or default-deny mode applied to the endpoint
  • Blocked Path Patterns Rules — path patterns for applications that are blocked from running
  • Blocked Hashes Rules — file hash values for applications that are blocked from running
  • Allowed Path Pattern Rules — path patterns for applications that are explicitly permitted to run
  • Allowed Hash Rules — file hash values for applications that are explicitly permitted to run
  • Exceptions — active temporary exceptions granted to endpoint users for specific blocked applications
  • BESBAC Service Status — whether the BigFix Application Control service is currently running on the endpoint

Procedure

  1. In the BigFix Console, navigate to All Content > BigFix Application Control > Analyses.
  2. From the Analyses pane, select Analyses: Effective Configuration.
    Figure 1. BigFix Application Control — Analyses: Effective Configuration — Details Tab Showing Per-Endpoint Control Mode, Path and Hash Rules, Exceptions, and BESBAC Service Status

    BigFix Application Control Analyses Effective Configuration pane in the BigFix Console, showing the Details tab with per-endpoint configuration data including Control Mode, Blocked Path Patterns Rules, Blocked Hashes Rules, Allowed Path Pattern Rules, Allowed Hash Rules, active Exceptions, and BESBAC Service Status for all managed endpoints.
  3. Select the Details tab to view the effective configuration data for all managed endpoints.

Results

The Details tab displays the current effective configuration for each managed endpoint: Control Mode, Blocked Path Patterns Rules, Blocked Hashes Rules, Allowed Path Pattern Rules, Allowed Hash Rules, active Exceptions, and BESBAC Service Status. Use this view to verify policy compliance and confirm the BESBAC service is running across your managed endpoints.