Welcome
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
BigFix Integrated Vulnerability Remediation (IVR) v.5
This guide explains how to install, configure, maintain, and use the IVR v.5 service. It also summarizes the full workflow for IVR v.5, from installing the IVR Retriever to remediating vulnerabilities from the BigFix UI.
Troubleshooting
Use this section to diagnose and resolve common problems with IVR v.5.

BigFix Documentation Homepage
BigFix Platform
Patch Documentation
Insights Documentation
The Insights feature of BigFix 11 provides you with advanced analytics and visualizations that you can use to identify risks in your environment and make appropriate business decisions.
CVE Search dashboard and Web Report
BigFix CVE Search dashboard and Web Report are available as part of a new Vulnerability Reporting site.
CyberFOCUS Analytics dashboard
From the BigFix CyberFOCUS Analytics dashboard, you can view various reports that display critical information related to vulnerabilities. The data are represented in the form of graphs and tables, so that the user can quickly become aware of the IT assets and the threats in the environment and take informed decisions to mitigate vulnerabilities.
ServiceNow Data Flow
This module provides an overview and features of BigFix ServiceNow Data Flow.
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
- BigFix Integrated Vulnerability Remediation (IVR) v.5
  This guide explains how to install, configure, maintain, and use the IVR v.5 service. It also summarizes the full workflow for IVR v.5, from installing the IVR Retriever to remediating vulnerabilities from the BigFix UI.
  - Product overview
    IVR v.5 connects vulnerability detection to remediation. It retrieves vulnerability findings from your scanner, matches them with BigFix Fixlets and devices, and lets you deploy the fix from the same screen where you review the finding. You do all of this in the BigFix UI.
  - System requirements
    Learn about the prerequisites, system requirements, network ports, and platform dependencies for the BigFix IVR v.5 Retriever service.
  - IVR v.5 Fixlets and Tasks
    Learn about the Fixlets and Tasks that install and uninstall the BigFix IVR Retriever for IVR v.5.
  - IVR v.5 setup process
    This section explains how to set up IVR v.5 after the IVR Retriever is installed. You register IVR with the BigFix UI by running one command on the BigFix UI server, and then complete the configuration in the BigFix UI. Complete the tasks in order.
  - IVR on-prem Start Process
    This section explains how to start the IVR Retriever service.
  - Managing the IVR configuration
    Learn about updating the IVR configuration settings.
  - IVR v.5 on BFUI
    This section explains how to use IVR in the BigFix UI: open the application, read the dashboard, work with vulnerability data, and remediate vulnerabilities. It applies to every user whose role includes IVR, not only administrators.
  - Configuration settings for IVR on-prem
    The following settings in AppConfig.yaml control the IVR v.5 on-prem application. To change a setting, stop the BES IVR Retriever Service, edit the file, and then start the service.
  - IVR logs
    This section describes the IVR logs.
  - Troubleshooting
    Use this section to diagnose and resolve common problems with IVR v.5.
  - Release notes
    This section lists the features and updates in each version of BigFix Integrated Vulnerability Remediation v.5.
  - Known limitations
    This section lists the known limitations in IVR v.5.
  - References
    Additional resources related to BigFix Integrated Vulnerability Remediation (IVR) v.5.
- BigFix Insights for Vulnerability Remediation (IVR) v.4
  This module provides comprehensive guidance on the installation, maintenance, and operation of the IVR v.4 service. It includes a detailed summary of the entire end-to-end workflow for using IVR v.4.
- BigFix Insights for Vulnerability Remediation (IVR)
  Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
Extended third-party Windows Applications
Updates for Windows Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party Mac Applications
Updates for Mac Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party NIX Applications
Updates for NIX Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Software Installer Library Dashboard for Windows
Learn how to use the Software Install Dashboard for deploying applications on Windows endpoints.
MCP Server for Vulnerability Remediation
Learn how to install, configure, secure, operate, and troubleshoot the MCP Server for Vulnerability Remediation, which connects compatible Model Context Protocol (MCP) clients to patch intelligence services and produces BigFix Fixlet content.
Remediate Guides in PDF
Following is a link to the BigFix Remediate user guide in PDF format:

Troubleshooting

Use this section to diagnose and resolve common problems with IVR v.5.

One or more of these symptoms occurs. Each symptom has a likely cause and a recommended action, listed in the following table.

Various causes, described in the table below.


Symptom	Likely cause	What to do
IVR shows IVR is not configured.	The IVR configuration isn't complete.	Complete the IVR v.5 setup process, or ask your administrator to.
IVR doesn't appear under Resolve.	The IVR site isn't enabled, its version is 0, or the user's role doesn't include IVR.	See Before you begin for the site, and Task 3 for the role.
IVR isn't listed when you create a role.	The IVR site isn't enabled.	See Before you begin, steps 1-3.
`BFUI.exe --configure-ivr` fails at authentication.	Wrong instance admin or IVR admin credentials.	Run the command again with the BigFix UI instance admin credentials and the IVR credentials from the Download Task.
Verify Connection fails on Database Configuration.	Wrong SQL Server values, the port is blocked, or the user can't create a schema.	Check the values and firewall, and grant the user permission to create a schema.
Verify Connection fails on Application configuration.	The local web server port is in use or blocked, or the proxy settings are wrong.	Choose a free, open port, and check the proxy host and port.
Verify Connection fails on Scanner Datasource configuration.	Wrong Tenable URL or API keys, or outbound access to Tenable is blocked.	Regenerate the API keys with a Tenable administrator account, and check outbound access on port 443 or the proxy.
The IVR tile stays in Not Configured after Finish.	A background automation process failed.	See the failure result in Task 2.
The dashboard shows no data.	The first automation run isn't complete.	Wait until Last Automation Run shows a time.
The Device view shows no devices.	The IVR Vulnerability Scanner Host ID analysis isn't activated.	See Before you begin, step 4.
Configuration changes, such as a new proxy, don't take effect.	The IVR service wasn't restarted.	See Managing the IVR configuration, step 4.
The Vulnerabilities tab is missing in Device Explorer.	The IVR site isn't enabled.	See Before you begin, steps 1-3.