Welcome
BigFix UI User's Guide
Read this guide for an introduction to the BigFix UI tools, concepts, and terminology.
Using BigFix UI
This guide is for regular users of the BigFix UI.
Resolve
The Resolve section provides tools to act on issues and apply remediations across your environment.
Fixlet Streams
Fixlet Streams help to automate the process of remediating endpoint vulnerabilities, such as patch and update deployments, while offering flexibility for manual intervention when critical issues arise. The feature ensures routine security and compliance tasks are handled efficiently, freeing up IT teams to focus on strategic initiatives. Additionally, it allows for ad-hoc remediation, enabling swift responses to urgent issues like zero-day vulnerabilities.
Managing Fixlet Streams
After you create a Fixlet Stream and its automation, you manage the stream from its details page. You can activate or deactivate the stream, change its criteria, change the deployment schedule, or delete the stream.
Deleting a Fixlet Stream
Delete a Fixlet Stream when you no longer need it. A stream must be inactive before you can delete it.

BigFix Documentation Homepage
BigFix 11 Platform Documentation
Welcome to the BigFix Platform documentation, where you can find information about how to install, maintain, and use BigFix.
Detailed system requirements
The content of this page has moved to the HCL Support site. You will be redirected shortly. If the auto-redirect fails for some reason, use this link: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0104120.
Platform guides in PDF format
Following is a list of links to the BigFix Platform user guides in PDF format:
Common Criteria Certification
Getting Started
Use this section to become familiar with BigFix infrastructure and key concepts necessary to understand how it works.
HTTPS across BigFix applications
This topic describes how the SSL/HTTPS communication works in BigFix applications and links the tasks on how to configure it.
Installation Guide
Learn the system requirements, licensing and installation instructions, and how to configure and maintain BigFix.
Configuration Guide
Learn how to configure BigFix according to your needs.
Console Operator's Guide
Learn how to work with the BigFix Console.
Asset Discovery User's Guide
Learn how BigFix Asset Discovery works.
Web Reports Guide
Learn how the Web Reports feature extends the power of BigFix.
BigFix Explorer Guide
Learn how the BigFix Explorer feature extends the power of BigFix.
BigFix MCP Server Guide
Learn how the BigFix Platform MCP Server extends the capabilities of BigFix by allowing compatible AI clients to use BigFix functionalities through the Model Context Protocol (MCP).
WebUI User's Guide
Read this guide for an introduction to the WebUI tools, concepts, and terminology.
WebUI Administration Guide
Read this guide for information about installing and administering the WebUI.
BigFix UI User's Guide
Read this guide for an introduction to the BigFix UI tools, concepts, and terminology.
- Introduction
  BigFix UI is a unified interface that consolidates multiple BigFix capabilities into one modern application. It provides IT operations and security teams with a centralized workspace to manage endpoints, remediate vulnerabilities, and generate reports.
- Getting Started
  The Getting Started section introduces key features that help users begin working with the BigFix UI. It provides a foundation for understanding how to access the system securely, navigate common features, and apply guided recommendations to improve efficiency and compliance.
- Using BigFix UI
  This guide is for regular users of the BigFix UI.
  - Home
    The customizable dashboard is the home page of the BigFix UI. It shows the applications and reports that you use most as a grid of widgets that you can add, remove, and reorder to match your workflow.
  - Explore
    The Explore section provides a centralized view of core BigFix resources. It helps administrators and operators quickly access devices, fixlets, deployments, sites, and analyses for monitoring and action.
  - Resolve
    The Resolve section provides tools to act on issues and apply remediations across your environment.
    - Custom Remediation
      Remediate devices on demand using your own Bash, PowerShell, or Action Scripts. Ideal for applying quick fixes, registry changes, or patching apps not covered by default content.
    - CyberFOCUS
      CyberFOCUS is a threat intelligence and remediation feature within BigFix UI that combines MITRE ATT&CK intelligence with CISA Known Exploited Vulnerabilities (KEV) metadata and BigFix Fixlet and device relevance data. It enables users to assess their security posture and take proactive remediation actions based on real-world threat intelligence.
    - DEX
      BigFix Digital Employee Experience (DEX) is an endpoint experience management application that gives IT and Workplace administrators a real-time, environment-wide view of digital experience health across managed endpoints. It aggregates device performance, application stability, and user sentiment into actionable DEX scores to proactively identify anomalies, optimize productivity, and automate issue remediation.
    - Workflow Builder
      Workflow Builder lets you automate multi-step device tasks without writing a Fixlet or Task: you chain predefined check, action, and flow-control steps in a drag-and-drop editor, and deploy the result as a single BigFix action tagged bf-workflow.
    - Fixlet Streams
      Fixlet Streams help to automate the process of remediating endpoint vulnerabilities, such as patch and update deployments, while offering flexibility for manual intervention when critical issues arise. The feature ensures routine security and compliance tasks are handled efficiently, freeing up IT teams to focus on strategic initiatives. Additionally, it allows for ad-hoc remediation, enabling swift responses to urgent issues like zero-day vulnerabilities.
      - Create Fixlet Stream
        The Create Fixlet Stream feature enables you to set up custom Fixlet streams to meet specific organizational needs by defining conditions and selecting targeted devices for updates. The guided workflow helps you specify Fixlet criteria, scope target devices, and review the configuration before creating the stream, which can later be automated for continuous remediation.
      - Creating an automation for a Fixlet Stream
        An automation defines when and how a Fixlet Stream deploys Fixlets to its subscribed devices. Use the Create automation wizard to set the device schedule, the execution sequence, and the activation date. When you create the automation, the stream becomes active and starts continuous remediation.
      - Managing Fixlet Streams
        After you create a Fixlet Stream and its automation, you manage the stream from its details page. You can activate or deactivate the stream, change its criteria, change the deployment schedule, or delete the stream.
        Activating and deactivating a Fixlet Stream
        Activate a Fixlet Stream to start deploying Fixlets on the schedule defined in its automation. Deactivate a stream to stop deployments and to unlock the edit and delete actions.
        Editing a Fixlet Stream
        Edit a Fixlet Stream to change its name, description, Fixlet criteria, or device criteria. A stream must be inactive before you can edit it.
        Editing a Fixlet Stream automation
        Edit the automation of an active Fixlet Stream to change when and how it deploys Fixlets, without changing the Fixlet criteria or the device subscription.
        Deleting a Fixlet Stream
        Delete a Fixlet Stream when you no longer need it. A stream must be inactive before you can delete it.
      - Fixlet Stream Details Page
        The Fixlet Stream details page provides a centralized view of a specific Fixlet Stream, including its configuration, subscribed devices, selected Fixlets, and deployment activity. From this page, you can monitor compliance, review automation settings, and activate, edit, or delete the stream.
      - Troubleshooting
        Understand these common issues and their resolutions, so that you can effectively troubleshoot and resolve problems encountered while managing and monitoring Fixlet Streams, ensuring smooth and efficient deployment processes.
      - Common use cases
        Fixlet Streams provide a versatile solution for managing patch deployments and updates across a range of device environments. Below are some common use cases illustrating how organizations can effectively utilize Fixlet Streams:
    - Integrated Vulnerability
      Integrated Vulnerability Remediation (IVR) correlates the vulnerability findings from your Tenable Vulnerability Management scanner with BigFix Fixlets and devices, so that you can review vulnerabilities and deploy their remediations from one place.
    - Patch
      The Patch dashboard tells you which Fixlets and devices to look at first and links back to the Fixlet explorer for the action.
    - Security Compliance
      Security Compliance gives Security and Compliance administrators a live, environment-wide view of compliance posture across every Checklist deployed in the BigFix environment.
    - License Reclamation
      The License Reclamation page shows which software is installed but not used, and the savings that you gain when you uninstall it. Use it to find the software that costs the most, to see where you can save money, and to reclaim licenses with one click. For more information, see Support for BFUI License Reclamation with mTLS.
  - Reporting
    The Reporting section provides tools to create, view, and manage reports for analysis and decision-making.
  - Administration
    The Administration section helps you manage users and access control in BigFix UI.
- Support
  For more information about this product, see the following resources:
BigFix UI Administration Guide
Read this guide for information about installing and administering the BigFix UI
Glossary
This glossary provides terms and definitions for the BigFix software and products.

Deleting a Fixlet Stream

Delete a Fixlet Stream when you no longer need it. A stream must be inactive before you can delete it.

Before you begin

You must have permission to manage Fixlet Streams.
The stream must be inactive. The delete icon is unavailable while a stream is active. See Activating and deactivating a Fixlet Stream.

About this task

Expand Resolve from the side navigation, select Fixlet Streams, and then click the name of the stream.

CAUTION: Deleting a Fixlet Stream permanently stops all deployments associated with the stream that are still running, and deletes the corresponding automation. The stream's criteria and device subscription are also removed. You cannot undo this action. Deployments that already ran are not reversed, and historical deployment records remain available from Explore > Deployments.

Procedure

Deactivate the stream if it is active.

See Activating and deactivating a Fixlet Stream.
Click the delete icon next to the status toggle.
In the Delete confirmation dialog, review the message, and then click Delete Fixlet Stream to confirm. To keep the stream, click Close.

The stream is removed from the Fixlet Streams landing page. Any deployments of the stream that are still running stop, and its automation is deleted.