Welcome
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
BigFix Integrated Vulnerability Remediation (IVR) v.5
This guide explains how to install, configure, maintain, and use the IVR v.5 service. It also summarizes the full workflow for IVR v.5, from installing the IVR Retriever to remediating vulnerabilities from the BigFix UI.
Configuration settings for IVR on-prem
The following settings in AppConfig.yaml control the IVR v.5 on-prem application. To change a setting, stop the BES IVR Retriever Service, edit the file, and then start the service.

BigFix Documentation Homepage
BigFix Platform
Patch Documentation
Insights Documentation
The Insights feature of BigFix 11 provides you with advanced analytics and visualizations that you can use to identify risks in your environment and make appropriate business decisions.
CVE Search dashboard and Web Report
BigFix CVE Search dashboard and Web Report are available as part of a new Vulnerability Reporting site.
CyberFOCUS Analytics dashboard
From the BigFix CyberFOCUS Analytics dashboard, you can view various reports that display critical information related to vulnerabilities. The data are represented in the form of graphs and tables, so that the user can quickly become aware of the IT assets and the threats in the environment and take informed decisions to mitigate vulnerabilities.
ServiceNow Data Flow
This module provides an overview and features of BigFix ServiceNow Data Flow.
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
- BigFix Integrated Vulnerability Remediation (IVR) v.5
  This guide explains how to install, configure, maintain, and use the IVR v.5 service. It also summarizes the full workflow for IVR v.5, from installing the IVR Retriever to remediating vulnerabilities from the BigFix UI.
  - Product overview
    IVR v.5 connects vulnerability detection to remediation. It retrieves vulnerability findings from your scanner, matches them with BigFix Fixlets and devices, and lets you deploy the fix from the same screen where you review the finding. You do all of this in the BigFix UI.
  - System requirements
    Learn about the prerequisites, system requirements, network ports, and platform dependencies for the BigFix IVR v.5 Retriever service.
  - IVR v.5 Fixlets and Tasks
    Learn about the Fixlets and Tasks that install and uninstall the BigFix IVR Retriever for IVR v.5.
  - IVR v.5 setup process
    This section explains how to set up IVR v.5 after the IVR Retriever is installed. You register IVR with the BigFix UI by running one command on the BigFix UI server, and then complete the configuration in the BigFix UI. Complete the tasks in order.
  - IVR on-prem Start Process
    This section explains how to start the IVR Retriever service.
  - Managing the IVR configuration
    Learn about updating the IVR configuration settings.
  - IVR v.5 on BFUI
    This section explains how to use IVR in the BigFix UI: open the application, read the dashboard, work with vulnerability data, and remediate vulnerabilities. It applies to every user whose role includes IVR, not only administrators.
  - Configuration settings for IVR on-prem
    The following settings in AppConfig.yaml control the IVR v.5 on-prem application. To change a setting, stop the BES IVR Retriever Service, edit the file, and then start the service.
  - IVR logs
    This section describes the IVR logs.
  - Troubleshooting
    Use this section to diagnose and resolve common problems with IVR v.5.
  - Release notes
    This section lists the features and updates in each version of BigFix Integrated Vulnerability Remediation v.5.
  - Known limitations
    This section lists the known limitations in IVR v.5.
  - References
    Additional resources related to BigFix Integrated Vulnerability Remediation (IVR) v.5.
- BigFix Insights for Vulnerability Remediation (IVR) v.4
  This module provides comprehensive guidance on the installation, maintenance, and operation of the IVR v.4 service. It includes a detailed summary of the entire end-to-end workflow for using IVR v.4.
- BigFix Insights for Vulnerability Remediation (IVR)
  Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
Extended third-party Windows Applications
Updates for Windows Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party Mac Applications
Updates for Mac Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party NIX Applications
Updates for NIX Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Software Installer Library Dashboard for Windows
Learn how to use the Software Install Dashboard for deploying applications on Windows endpoints.
MCP Server for Vulnerability Remediation
Learn how to install, configure, secure, operate, and troubleshoot the MCP Server for Vulnerability Remediation, which connects compatible Model Context Protocol (MCP) clients to patch intelligence services and produces BigFix Fixlet content.
Remediate Guides in PDF
Following is a link to the BigFix Remediate user guide in PDF format:

Configuration settings for IVR on-prem

The following settings in AppConfig.yaml control the IVR v.5 on-prem application. To change a setting, stop the BES IVR Retriever Service, edit the file, and then start the service.

Note:

Change the web protocol, local web server port, CORS allowed origins, and proxy settings in the BigFix UI. See Managing the IVR configuration.

AppConfig.yaml


Setting name	Data type	Default value	Description
Configs
ByPassCertificateVerification	Boolean	TRUE	Specifies whether to bypass certificate verification. Possible values: TRUE, FALSE.
CorsAllowedOrigins	String	'*'	The origins allowed for CORS. Managed from the BigFix UI (Application configuration). Don't edit it here.
LogCompression	Boolean	TRUE	Specifies whether to compress rotated log files. Compressed logs use the `.gz` format. Use a tool such as 7-Zip to open them.
LogMaxAgeDays	Int	15	The maximum age of log files, in days.
LogMaxBackups	Int	100	The maximum number of log backups to keep.
LogMaxSizeMb	Int	10	The maximum size of a log file, in megabytes.
Port	Int	9011	The port number for the application.
EngConfigs
Port	Int	9014	The port number for the EngConfigs service.
WebServer	String	127.0.0.1	The server that hosts this service.
AutomationIntervalHours	Int	12	The interval, in hours, between automation runs.