Welcome
Remote Control
BigFix Remote Control application helps to communicate between different components, clients, and endpoints within BigFix environment.
Remote Control On-demand Target Guide
Use Remote Control to start remote control sessions over the internet with targets that do not have the target software installed.
On-demand target portal access for internet users
A reverse proxy, in a DMZ, can be configured to provide access for Internet users to the on-demand portal that is on the Remote Control server in the intranet. The reverse proxy must not allow access to other sections of the Remote Control server, but only to the on-demand portal.

BigFix Documentation Homepage
BigFix 11 Lifecycle Documentation
Welcome to the BigFix Lifecycle documentation, where you can find information about how to install, maintain, and use BigFix Lifecycle.
BigFix Platform
BigFix Query
Lifecycle overview
BigFix Lifecycle is single-agent, single-console technology that provides near real-time visibility into the state of endpoints.
Lifecycle guides in PDF format
Following is a list of links to the BigFix Lifecycle guides in PDF format:
Software Distribution
Use the BigFix Software Distribution applications to deploy software to endpoints across your network from a single location. Maintain control and visibility into software delivery and installation. Device owners can use the Self Service Application to manage software and other BigFix actions that are deployed to them as offers.
OS Deployment
BigFix OS Deployment, which is part of the BigFix Lifecycle Management suite, provides a consolidated, comprehensive solution to quickly deploy new workstations and servers throughout a network from a single, centralized location. This solution saves time and money, enforces a standardized and approved image, and reduces risks associated with non-compliant or insecure configurations.
Remote Control
BigFix Remote Control application helps to communicate between different components, clients, and endpoints within BigFix environment.
- Release notes
  A summary of changed or new features and enhancements included in BigFix Remote Control.
- Remote Control Installation Guide
  By using Remote Control you can remotely support and control thousands of PCs and servers, on an enterprise scale, from a central location or directly, in peer to peer mode.
- Remote Control Administrators Guide
  This guide is for users who want to administer Remote Control.
- Remote Control Console User Guide
- BigFix Remote Control Controller Users Guide
- Remote Control Target Users Guide
- Remote Control On-demand Target Guide
  Use Remote Control to start remote control sessions over the internet with targets that do not have the target software installed.
  - Configuring the landing page URL
    Remote Control provides a default web page that a target user can access to temporarily install the target software. The URL for the web page is http://trcserver/trc/ondemand/index.jsp. The variable trcserver is the host name or IP address of your Remote Control server. The default web page is provided when you have the Remote Control server installed. You can also configure server properties to provide a URL that the target user can access. The defined URL is displayed to the controller user when they start a broker remote control session.
  - Configuring custom fields
    You can add extra input fields to the default web page that is used during the process of downloading and temporarily installing the target software.
  - Creating a custom landing page
    You can customize the web page that is used to start the process to download and temporarily install the target software. The web page can be integrated into your own company website.
  - On-demand target portal access for internet users
    A reverse proxy, in a DMZ, can be configured to provide access for Internet users to the on-demand portal that is on the Remote Control server in the intranet. The reverse proxy must not allow access to other sections of the Remote Control server, but only to the on-demand portal.
    - Configuring HTTP and HTTPS connections
      To configure the broker to accept HTTP and HTTPS connections, add a connection to the configuration file on the broker.
    - Sharing a port between the reverse proxy and the broker
      When a broker is configured with a reverse proxy, you can use port 443 for both reverse proxy and broker.
    - Setting the landing page URL to use a reverse proxy
      When you configure a reverse proxy on your broker, the URL for the landing page is configured differently. The URL must contain the broker host name or IP address instead of the server host name and IP address.
  - Setting session permissions
    A target that participates in a broker session receives session policies from the server. These policies are resolved from the user and target group permission links that the user and target in the session are associated with. An on-demand target participates in broker remote control sessions. However, it is not registered with the server and does not belong to regular target groups. An unregistered target can also be a computer that you install the target software on, configure it with correct broker settings, and the target property Managed set to no. You can define session permissions for unregistered targets by using the Set Permissions for Unregistered Targets function.
  - Session policies for unregistered targets
    The set of session policies available for unregistered targets is divided into two sections. The core policies cater for remote support actions during a session. The extended policies cater for the session administration actions during a session. The core policies are always visible on the Set Permissions for Unregistered Targets screen. Click Show in the More permissions section to set values for the extended policies.
  - Defining the temporary recording directory for a broker
    You can define the directory where session recordings are temporarily stored on the broker, by configuring broker properties.
  - On-demand target installation methods
    The on-demand target installation method is determined by properties in the ondemand.properties files and the browser that is used by the target user .
  - Starting a session with an on-demand target
    You can start a remote control session through the internet with a target that does not have the target software already installed.
  - Session limitations
    Some limitations might be in effect during a remote control session with an on-demand target.
  - Saving a session recording on the on-demand target
    As the user on an on-demand target you can save a recording of a remote control session on your computer. You can select to save the recording when you accept the session or start to record and save during the session.
  - Handing over a broker collaboration session
    If you are the master controller of a collaboration session, that involves a broker, you can pass full control of the session to another participant.
  - Ending a session
    When you end a session with an Remote Control on-demand target, all related files and directories are deleted.
  - Ending a collaboration session when you disconnect
    When you end a session in which collaboration is started, you can choose to stay in the session or disconnect from the session.
  - Saving the session log file
    You can save the trace log file that is created during a session with an Remote Control on-demand target.
  - Session history for unregistered targets
    After you participate in remote control sessions with on-demand targets, you can view the session history. Sessions that involved unregistered targets are listed in the All Session History report and My Session History report together with the registered target sessions. You can also view a list of the sessions that only involved unregistered targets.
  - Database table definitions
    Description and definition of the database tables that hold data for remote control sessions with on-demand targets. The SESSIONS_DATA table hold the data that is submitted from the default web page that is used by the target user. The SESSIONS table holds session data.
  - OnDemand properties file
    Edit the ondemand.properties file to create and configure properties for remote control sessions with on-demand targets.
  - Determine the installation method for the on-demand target
    The configuration of the on-demand installation method properties determines which installation method is used for the on-demand target.
  - Lite Web Portal
    Lite Web Portal enables you to start a Remote Control session with an On Demand Target without using a VPN, even when the controller and the target are over the Internet.
  - Troubleshooting
    When the on-demand target is installed, a log file is created in the target user's home directory. This file can be used for debugging purposes to examine any errors during the installation of the target or during a remote control session.
  - Frequently asked questions
- Remote Control V10 Readme
Power Management
Use Power Management to control, monitor, and manage conservation policies in your deployment.
Server Automation
Server Automation provides powerful automation. You can use it to sequence automation actions in steps across multiple endpoints.
Profile Management
Profile Management is a WebUI-based feature of BigFix Lifecycle. It provides Security Administrators the capability to define and deploy security policies to Windows 10 and macOS devices.
CVE Search dashboard
BigFix CVE Search dashboard and Web Report are available as part of the CyberFOCUS site.
BigFix Remediate
BigFix MCM

On-demand target portal access for internet users

A reverse proxy, in a DMZ, can be configured to provide access for Internet users to the on-demand portal that is on the Remote Control server in the intranet. The reverse proxy must not allow access to other sections of the Remote Control server, but only to the on-demand portal.

Remote Control provides an integrated reverse proxy for ease of deployment and configuration. The Remote Control broker component includes limited proxy functions. The integrated reverse proxy means that a broker environment can be deployed with Remote Control components only. No third-party components are required. The reverse proxy supports both HTTP and HTTPS and also supports combining HTTP and HTTPS. For example, the broker URL can be configured with HTTP protocol and the server URL in the broker properties file can be configured with HTTPS. The target user enters an HTTP on-demand URL that contains the broker host name. The reverse proxy accepts this request and uses the defined HTTPS server URL to retrieve the on-demand portal page from the server. The proxy can be used to access the on-demand portal only, it cannot be configured as a general-purpose reverse proxy. It was not designed for scalability. For deployments where heavy usage is expected, you can use an off-the-shelf reverse HTTP proxy. You can also host a custom on-demand portal on your own internet website.

Reverse proxy limitations:

The broker supports only HTTP 1.0 and HTTP 1.1. HTTP requests with other versions result in HTTP 505 Version not supported.
The reverse proxy cannot be used as a general-purpose reverse proxy server.
The reverse proxy cannot be used to publish other parts of the Remote Control server to the Internet. For example, the reverse proxy cannot be configured to allow targets to register or users to log in.