Welcome
BigFix UI User's Guide
Read this guide for an introduction to the BigFix UI tools, concepts, and terminology.
Using BigFix UI
This guide is for regular users of the BigFix UI.
Resolve
The Resolve section provides tools to act on issues and apply remediations across your environment.

BigFix Documentation Homepage
BigFix 11 Platform Documentation
Welcome to the BigFix Platform documentation, where you can find information about how to install, maintain, and use BigFix.
Detailed system requirements
The content of this page has moved to the HCL Support site. You will be redirected shortly. If the auto-redirect fails for some reason, use this link: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0104120.
Platform guides in PDF format
Following is a list of links to the BigFix Platform user guides in PDF format:
Common Criteria Certification
Getting Started
Use this section to become familiar with BigFix infrastructure and key concepts necessary to understand how it works.
HTTPS across BigFix applications
This topic describes how the SSL/HTTPS communication works in BigFix applications and links the tasks on how to configure it.
Installation Guide
Learn the system requirements, licensing and installation instructions, and how to configure and maintain BigFix.
Configuration Guide
Learn how to configure BigFix according to your needs.
Console Operator's Guide
Learn how to work with the BigFix Console.
Asset Discovery User's Guide
Learn how BigFix Asset Discovery works.
Web Reports Guide
Learn how the Web Reports feature extends the power of BigFix.
BigFix Explorer Guide
Learn how the BigFix Explorer feature extends the power of BigFix.
BigFix MCP Server Guide
Learn how the BigFix Platform MCP Server extends the capabilities of BigFix by allowing compatible AI clients to use BigFix functionalities through the Model Context Protocol (MCP).
WebUI User's Guide
Read this guide for an introduction to the WebUI tools, concepts, and terminology.
WebUI Administration Guide
Read this guide for information about installing and administering the WebUI.
BigFix UI User's Guide
Read this guide for an introduction to the BigFix UI tools, concepts, and terminology.
- Introduction
  BigFix UI is a unified interface that consolidates multiple BigFix capabilities into one modern application. It provides IT operations and security teams with a centralized workspace to manage endpoints, remediate vulnerabilities, and generate reports.
- Getting Started
  The Getting Started section introduces key features that help users begin working with the BigFix UI. It provides a foundation for understanding how to access the system securely, navigate common features, and apply guided recommendations to improve efficiency and compliance.
- Using BigFix UI
  This guide is for regular users of the BigFix UI.
  - Home
    The customizable dashboard is the home page of the BigFix UI. It shows the applications and reports that you use most as a grid of widgets that you can add, remove, and reorder to match your workflow.
  - Explore
    The Explore section provides a centralized view of core BigFix resources. It helps administrators and operators quickly access devices, fixlets, deployments, sites, and analyses for monitoring and action.
  - Resolve
    The Resolve section provides tools to act on issues and apply remediations across your environment.
    - Custom Remediation
      Remediate devices on demand using your own Bash, PowerShell, or Action Scripts. Ideal for applying quick fixes, registry changes, or patching apps not covered by default content.
    - CyberFOCUS
      CyberFOCUS is a threat intelligence and remediation feature within BigFix UI that combines MITRE ATT&CK intelligence with CISA Known Exploited Vulnerabilities (KEV) metadata and BigFix Fixlet and device relevance data. It enables users to assess their security posture and take proactive remediation actions based on real-world threat intelligence.
    - DEX
      BigFix Digital Employee Experience (DEX) is an endpoint experience management application that gives IT and Workplace administrators a real-time, environment-wide view of digital experience health across managed endpoints. It aggregates device performance, application stability, and user sentiment into actionable DEX scores to proactively identify anomalies, optimize productivity, and automate issue remediation.
    - Workflow Builder
      Workflow Builder lets you automate multi-step device tasks without writing a Fixlet or Task: you chain predefined check, action, and flow-control steps in a drag-and-drop editor, and deploy the result as a single BigFix action tagged bf-workflow.
    - Fixlet Streams
      Fixlet Streams help to automate the process of remediating endpoint vulnerabilities, such as patch and update deployments, while offering flexibility for manual intervention when critical issues arise. The feature ensures routine security and compliance tasks are handled efficiently, freeing up IT teams to focus on strategic initiatives. Additionally, it allows for ad-hoc remediation, enabling swift responses to urgent issues like zero-day vulnerabilities.
    - Integrated Vulnerability
      Integrated Vulnerability Remediation (IVR) correlates the vulnerability findings from your Tenable Vulnerability Management scanner with BigFix Fixlets and devices, so that you can review vulnerabilities and deploy their remediations from one place.
    - Patch
      The Patch dashboard tells you which Fixlets and devices to look at first and links back to the Fixlet explorer for the action.
    - Security Compliance
      Security Compliance gives Security and Compliance administrators a live, environment-wide view of compliance posture across every Checklist deployed in the BigFix environment.
    - License Reclamation
      The License Reclamation page shows which software is installed but not used, and the savings that you gain when you uninstall it. Use it to find the software that costs the most, to see where you can save money, and to reclaim licenses with one click. For more information, see Support for BFUI License Reclamation with mTLS.
  - Reporting
    The Reporting section provides tools to create, view, and manage reports for analysis and decision-making.
  - Administration
    The Administration section helps you manage users and access control in BigFix UI.
- Support
  For more information about this product, see the following resources:
BigFix UI Administration Guide
Read this guide for information about installing and administering the BigFix UI
Glossary
This glossary provides terms and definitions for the BigFix software and products.

Resolve

The Resolve section provides tools to act on issues and apply remediations across your environment.

Resolve helps you manage operational risk by letting you act quickly on identified issues. It includes:

Custom Remediation – Remediate devices on demand with your own Bash, PowerShell, or Action Scripts. Use it for quick fixes, registry changes, or patching apps that default content does not cover.
CyberFOCUS – Combine MITRE ATT&CK intelligence and CISA Known Exploited Vulnerabilities (KEV) data with BigFix Fixlet and device relevance. Assess your security posture and start a remediation flow from the findings.
DEX – Monitor digital experience health across managed endpoints. BigFix Digital Employee Experience (DEX) aggregates device performance, application stability, and user sentiment into DEX scores so that you can spot anomalies and act on them.
Workflow Builder – Automate multi-step device tasks in a drag-and-drop editor, without writing a Fixlet or Task. Chain check, action, and flow-control steps, then deploy the result as a single BigFix action.
Fixlet Streams – Automate recurring remediation, such as patch and update deployments, on a defined schedule. Streams also support ad hoc remediation, so that you can respond fast to urgent issues such as zero-day vulnerabilities.
Integrated Vulnerability Remediation – Correlate vulnerability findings from your Tenable Vulnerability Management scanner with BigFix Fixlets and devices, so that you review vulnerabilities and deploy their remediations in one place.
Patch – Get a consolidated, risk-prioritized view of missing patches and vulnerable devices. The dashboard shows which Fixlets and devices to address first and links back to the Fixlet explorer for the action.
Security Compliance – Review a live, environment-wide view of compliance posture across every checklist deployed in your BigFix environment, and deploy remediation for the checks that fail.
License Reclamation – See which software is installed but not used, and the savings that you gain when you uninstall it. Find the software that costs the most and reclaim licenses with one click.
Protection Level Agreement (PLA) – Use baselines that combine device contexts, desired patch levels, and compliance standards for a set of Fixlets, measured against service levels that IT, Security, and the wider organization agree to.