Welcome
BigFix Compliance Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
Setup
Complete configuration steps to access the PCI DSS checklists and checks and ensure accurate relevance evaluation on the endpoints.
Configuring endpoints
Some checklists require you to run the Environment Setup Task to populate the necessary properties on the endpoints to enable relevance evaluation. Run this task when it shows as relevant and refresh the results on the endpoint.
Filesystem scan configuration
If you are using the PCI DSS checklist for AIX 7 or AIX 6, you can further configure the range of filesystems and directories to be included in the property file used for relevance evaluation.

BigFix Documentation Homepage
BigFix V9.5 Compliance Documentation
Welcome to the BigFix Compliance documentation, where you can find information about how to install, maintain, and use BigFix Compliance.
BigFix Platform
BigFix Query
Compliance Overview
BigFix Compliance helps support endpoint security throughout your organization.
Compliance Guides in PDF format
Following is a list of links to the BigFix Compliance user guides in PDF format:
Client Manager for Endpoint Protection
BigFix Compliance CMEP is an effective tool to monitor the deployment and health status of various Endpoint Protection products and provide quick remediation actions to recover needed endpoint protection.
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
BigFix Compliance Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
- Overview
  HCL BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based on the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
- Setup
  Complete configuration steps to access the PCI DSS checklists and checks and ensure accurate relevance evaluation on the endpoints.
  - Subscribing to the SCM reporting site
    To fully use the reporting functions in the BigFix Compliance Analytics, you must subscribe to the SCM reporting site.
  - Accessing the PCI DSS Fixlet sites
    Before you can access the security configuration checklists that are related to PCI DSS, you must acquire the sites and accept the license agreement. After you acquire the site, you must gather the contents of the site to your console. You must also subscribe your computers to the site so that they can access the PCI DSS content.
  - Configuring endpoints
    Some checklists require you to run the Environment Setup Task to populate the necessary properties on the endpoints to enable relevance evaluation. Run this task when it shows as relevant and refresh the results on the endpoint.
    - Filesystem scan configuration
      If you are using the PCI DSS checklist for AIX 7 or AIX 6, you can further configure the range of filesystems and directories to be included in the property file used for relevance evaluation.
  - Setting up the PCI DSS Policy Reports for BigFix Compliance Analytics V1.9 and later
    BigFix Compliance Analytics version 1.9 provides PCI DSS Policy reports that contain aggregated data across checklists, which identifies the level of compliance for a specific PCI DSS requirement or milestone. To generate the policy reports, complete the required setup.
  - Setting up custom reporting for BigFix Compliance Analytics V1.8 and earlier
    BigFix Compliance PCI Add-on provides reports that show the cumulative state aggregated on the level of specific PCI DSS requirements or milestones. To view such reports on BigFix Compliance Analytics V1.8 and earlier console, you must complete a few configuration steps.
- Using checks and checklists
  The check Fixlets in Configuration Management checklists assess an endpoint against a configuration standard. Many check Fixlets have a corresponding analysis, sometimes referred to as measured values, that report the value of the element that the check Fixlet evaluates.
- Understanding the results in BigFix Compliance Analytics
  Use BigFix Compliance Analytics (formerly known as Security and Compliance Analytics or SCA) to navigate and explore security configuration check results.
- Resources
  You can find more information about Security Configuration Management and PCI DSS in the following resources.
Security Compliance Analytics
Security and Compliance Analytics (SCA) is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
BigFix and QRadar User Guide
QRadar® provides security intelligence for protecting assets and information from advanced threats. BigFix provides a dashboard that is integrated with QRadar®. This dashboard is called the Manage Vulnerable Computers dashboard and is located within the Endpoint Protection domain in BigFix. From this dashboard, you can view enriched vulnerability and risk data, from which you can quickly identify the computers that are most at risk. You can remediate the vulnerabilities that are detected by QRadar® and you can also quarantine or un-quarantine computers.
BigFix Client Compliance
This guide describes the BigFix Client Compliance and its solutions (BigFix Client Compliance Configuration and BigFix Client Compliance Windows (IPSec Framework)) which helps in maintaining the compliance status of the computers.
BigFix and Carbon Black integration
The HCL BigFix and Carbon Black integration allows administrators to deploy a full endpoint security solution to detect, contain, investigate, and remediate security threats and attacks on endpoints across the enterprise. The following sections provide useful information and links to the resources available for the solution.
Middleware Application Patching
BigFix Remediate
BigFix MCM

Filesystem scan configuration

If you are using the PCI DSS checklist for AIX 7 or AIX 6, you can further configure the range of filesystems and directories to be included in the property file used for relevance evaluation.

Some of the AIX Fixlets verify attributes and ownership of various subsets of files on local drives, including the property file that is created by the Environment Setup Task. This property file denotes the list of files that are used by the Fixlets in the checklist for AIX. It contains a list of all local and regular files with the exclusion of remote filesystems and special filesystems such as /tmp or /dev.

BigFix provides the globalfind feature to help prevent multiple scanning of local filesystems, which in turn provides better performance results.

You can set the parameters for the globalfind feature from Configure Filesystem Scan Options to indicate the mount points, directories, or filesystems that are not to be included in the property file. For example, you can specify to skip the data partitions that have too many files.

Note: The parameter changes will only take effect after the next Environment Setup Task run.