Welcome
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Using Patch Management for Red Hat Enterprise Linux
You can manage Fixlets using dashboards, reports, and wizards. You can deploy, fix, and uninstall Fixlets. You can also view the breakdown of Fixlets available or needed in your deployment.
Patch using Fixlets
From the BigFix Console, you can select and deploy actions for the relevant Fixlets. Once initiated, the action propagates across your deployment, applying patches based on the configurations set in the Fixlet work area and the Take Action dialog.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
- Special notice
- Edition notice
- Overview
  BigFix®Patch for Red Hat Enterprise Linux™ keeps your Linux clients current with the latest updates and service packs.
- Setup
  Setting up your environment for patch management.
- Using Patch Management for Red Hat Enterprise Linux
  You can manage Fixlets using dashboards, reports, and wizards. You can deploy, fix, and uninstall Fixlets. You can also view the breakdown of Fixlets available or needed in your deployment.
  - Patch using Fixlets
    From the BigFix Console, you can select and deploy actions for the relevant Fixlets. Once initiated, the action propagates across your deployment, applying patches based on the configurations set in the Fixlet work area and the Take Action dialog.
  - Supersedence
- Using RHSM download plug-ins
  The download plug-in is an executable program that downloads relevant packages directly from the patch vendor. Fixlets use an internal protocol to communicate with the download plug-in to download files. These Fixlets are based on updates made by the vendor.
- Using the RHSM download cacher
  Use the RHSM download cacher to download and cache x86, x86_64, S390x, ppc64le, ppc64 Red Hat patches in air-gapped environments.
- Multiple-Package Baseline Installation
  BigFix Patch provides a solution to combine the installation of updates for multiple packages in a baseline into a single task, which can reduce the execution time of the baseline.
- Understanding RHEL patch add-ons
  This topic gives you a brief introduction about Red Hat Enterprise Linux (RHEL) Patch Add-Ons.
- Deploying extended support patches with BigFix
  You can apply Extended Support (EUS and ELS) patch Fixlets the same way you have been applying all your RHEL patches with BigFix.
- Frequently Asked Questions
  Learn the answers to frequently asked questions about BigFix EUS/ELS Patch Add-Ons for Red Hat Enterprise Linux 5, 6, 7 and 8.
- Notices
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Patch using Fixlets

From the BigFix Console, you can select and deploy actions for the relevant Fixlets. Once initiated, the action propagates across your deployment, applying patches based on the configurations set in the Fixlet work area and the Take Action dialog.

You can deploy patches from the BigFix Console.

In the console navigation tree, go to Dashboard→ License Overview.
Enable the Patches for RHEL8 Extended Support.
Once enabled, the site will appear under External Sites, listing the available Fixlets.
Figure 1. External sites - Fixlets
To deploy the Fixlets, select the applicable Fixlet.
Click Take Action and choose Click here to start the deployment process and update the current packages to deploy the Fixlet on the target endpoint.
Figure 2. Click here to start the deployment process and update the current packages