Custom PLA

Creating custom PLA

To create a new custom PLA, complete these steps:

1. Open the Create Custom PLA wizard:

   • In BigFix UI, navigate to Protection Level Agreements.

   • Click Add new PLA in the top-right corner of the PLA landing page.

   • The Create custom PLA wizard opens and guides you through four steps.

     

2. Target days: Define target days

   • Enter a PLA Name.

   • (Optional) Enter a Description that explains the remediation policy.

   • Specify the Target days value. Target days defines the maximum number of days allowed to remediate a vulnerability.

     • The countdown starts from the vendor patch release date

     • Devices exceeding this timeline are considered non-compliant

   • Click Next to continue.
3. Fixlets: Define Fixlet criteria:

   

   • On the Fixlets step, select the Operating System (mandatory) from the dropdown list for which the Fixlet Stream applies. Only Fixlets relevant to the selected operating system are considered.
   • Under Define the Fixlet criteria, choose how Fixlets are filtered:

     • Select Single condition to define one criterion, or

     • Select Multiple condition (Criteria: AND) to require all conditions to match.

   • Define the Fixlet criteria by specifying:

     • Property – For example, CVE
     • Operator – For example, in
     • Value – One or more values that identify the Fixlets
   • Click Apply. The system evaluates the criteria and identifies matching Fixlets.
   • Review the Preview selected Fixlets section to confirm that the expected Fixlets are included.
   • Click Next.
4. Devices: Define target devices.

   

   • On the Devices step, specify how devices are selected for the Fixlet Stream.
   • Choose one of the following filter methods:

     • Query – Create dynamic filters based on device properties.

     • Device list – Select devices manually from the list.

   • You can apply filters using Single condition or Multiple condition (AND/OR) options to refine the Fixlet list. You can click on Reset Filters to clear filters. For more information, see Filter by query.
   • Click Apply to evaluate the filters.
   • Review the Preview of dynamically applicable targeted devices section to verify which devices match the criteria.
   • Click Next.
5. Summary: Review and create the PLA.

   

   • Review the PLA Name, Description, Target days, Fixlet Criteria, Devices Criteria and modify if needed before finalizing.
   • Click Create to create the custom PLA.
   • A success message is displayed. Click Done.

The custom PLA will be stored on the server and listed on the Protection Level Agreement page. Custom PLAs are not activated by default. Activate the PLA as needed to begin monitoring remediation timelines.

Editing Custom PLA

1. From the Protection Level Agreement page, click on a custom PLA that you want to edit.
2. Deactivate custom PLA: If the custom PLA is activate, you must deactivate before making changes.
3. Click Edit.

   

4. Modify PLA Details: You can update description of the PLA, target days, Fixlet selection, and target device selection as needed.
   Note: You cannot rename a custom PLA. To use a different name, create a new custom PLA
5. Review: Carefully review the Summary, then click Update > Done. The changes will be reflected on the Protection Level Agreement page.
6. Reactivate PLA: Once edits are complete, reactivate the PLA to enforce the updated PLA.

Deleting Custom PLA