Welcome
BigFix SaaS User Guide
This guide is for the regular users of BigFix SaaS.
Device Explorer
Use the Device Explorer Dashboard in BigFix to explore all connected devices in table and chart formats. Filter, sort, add devices, perform remediation, schedule maintenance, and export reports—all from one unified view.
Create Dynamic Device Group
Device groups help you organize devices and target actions, policies, or maintenance settings. A dynamic device group updates automatically as devices start or stop matching the defined conditions.

BigFix Documentation Homepage
BigFix SaaS Documentation
Welcome to BigFix SaaS, your comprehensive solution for cloud-based endpoint management. BigFix SaaS combines the reliability and control of BigFix with the flexibility of the cloud. Whether transitioning from an on-premises setup or exploring new possibilities, BigFix SaaS delivers simplicity, scalability, and security.
BigFix SaaS Overview
BigFix SaaS is a software-as-a-service based endpoint management platform that automates the management, patching, and inventory of nearly 100 different operating system versions.
Introduction
BigFix SaaS is an endpoint management platform that automates patch management and inventory across various operating systems and apps. Benefits include cost savings, accessibility, scalability, automatic updates, quick deployment, reliability, high compatibility, SaaS security, and reduced hardware requirements.
Getting Started with BigFix SaaS
This guide helps you get started with BigFix SaaS solution for managing your endpoints. BigFix SaaS is designed to simplify and streamline the management of users, devices, and deployments within your organization.
BigFix SaaS User Guide
This guide is for the regular users of BigFix SaaS.
- My Dashboard
  My Dashboard is the main page where users can add devices to their deployment and access additional functionality through icons for notifications and user profiles. The platform allows customization with light or dark mode at the account level, affecting all users.
- Custom Remediation
  Remediate devices on demand using your own Bash, PowerShell, or Action Scripts. Ideal for applying quick fixes, registry changes, or patching apps not covered by default content.
- CyberFOCUS
  CyberFOCUS is a threat intelligence and remediation feature within BigFix SaaS Remediate that provides visibility into CISA KEV (Known Exploited Vulnerabilities) and MITRE ATT&CK reports. It enables users to assess their security posture and take proactive remediation actions based on real-world threat intelligence.
- Deployment Manager
  The Deployment Manager in BigFix streamlines the process of executing actions on devices within a deployment. It allows users to initiate and monitor deployments, which can range in complexity from quick tasks completed in minutes to more involved processes that may take days to finish on all targeted devices.
- Device Explorer
  Use the Device Explorer Dashboard in BigFix to explore all connected devices in table and chart formats. Filter, sort, add devices, perform remediation, schedule maintenance, and export reports—all from one unified view.
  - Device Details page
    The Device Details page in BigFix provides in-depth information about enrolled devices, aiding in troubleshooting by displaying device attributes and location. Users can access this page by selecting a device from the Device Explorer table and view unique properties, activity feed, applicable fixlets, device properties, and tags.
  - Setting up remediation flow
    The remediation process in BigFix SaaS is designed to simplify and streamline patch management and vulnerability remediation.
  - Setting up device maintenance window
    The Device Maintenance Window feature enables administrators to schedule specific time frames for executing actions on devices, ensuring controlled and predictable deployments, updates, and remediations. It supports daily, weekly, and monthly schedules with configurable time zones and execution conditions, minimizing disruptions while allowing flexibility for urgent remediations when needed.
  - Create Dynamic Device Group
    Device groups help you organize devices and target actions, policies, or maintenance settings. A dynamic device group updates automatically as devices start or stop matching the defined conditions.
  - Create Static Device Group
    Static device groups allow you to manually organize devices by explicitly adding or removing individual devices. Membership in a static group does not change automatically and remains exactly as defined by the user.
  - On-Prem Relay Deployment
    Enable BigFix SaaS customers to deploy, configure, and manage on-premises Relays that report to the cloud-based Top-Level Relays (TLRs), improving network efficiency and endpoint management in hybrid environments.
  - Client settings management
    Configure, modify, or remove BigFix client (Platform) settings for individual or multiple devices using Device Explorer in BigFix SaaS.
- Fixlet Explorer
  Fixlet Explorer enables users to view and manage Fixlets, which are sets of instructions for the BigFix agent to execute on devices. Users can filter and deploy Fixlets, access detailed information on CVEs, and navigate through a data table displaying relevant Fixlet details.
- Fixlet Streams
  Fixlet Streams help to automate the process of remediating endpoint vulnerabilities, such as patch and update deployments, while offering flexibility for manual intervention when critical issues arise. The feature ensures routine security and compliance tasks are handled efficiently, freeing up IT teams to focus on strategic initiatives. Additionally, it allows for ad-hoc remediation, enabling swift responses to urgent issues like zero-day vulnerabilities.
- Protection Level Agreement (PLA)
  Protection Level Agreements are a set of baselines that combine device contexts, and desired patch levels and compliance standards for a given set of Fixlets against agreed-to organisational service levels by key stakeholders including IT, Security, and the overall organization.
- All Reports
  The All Reports page provides a central location to view, manage, and organize all reports available in BigFix SaaS. From this page, you can apply filters, delete reports, and manage report visibility. You can also mark reports as Favorites.
- User Management
  The User Manager application in BigFix SaaS provides administrators with a robust interface to efficiently manage user accounts, roles, permissions, and activities in BigFix SaaS. This guide walks you through the process of creating new users, disabling or deleting existing users, setting passwords, managing roles, and more, ensuring you have a smooth and efficient experience.
- Integrated Vulnerability Remediation
  Integrated Vulnerability Remediation (IVR) provides a real-time overview of security vulnerabilities categorized by severity, using both the Common Vulnerability Scoring System (CVSS) and the Vulnerability Priority Rating (VPR). Use this feature to configure data sources, visualize vulnerability data in charts, and manage individual vulnerabilities in a detailed table. You can remediate vulnerabilities directly from the dashboard and export the data.
Guides in PDF format
This section contains links to PDF versions of all the BigFix SaaS product guides.
Frequently Asked Questions

Create Dynamic Device Group

Device groups help you organize devices and target actions, policies, or maintenance settings. A dynamic device group updates automatically as devices start or stop matching the defined conditions.

Use this task to create a dynamic device group by defining filter conditions that automatically include devices matching specific criteria.

Procedure

From the BigFix SaaS side navigation, expand Explore and select Devices.
Click the View all link next to the Device Groups (Top 5 by Member Count) chart.
The Device Groups page opens.
Select Create device group on the Device Groups page.
The Create device group widget opens.
In Group name (required), enter a unique name for the device group.
Under Filter the devices below, choose one of the following:
- Single condition to define one filter rule.
- Multiple condition (AND) to combine multiple filter rules.
Define the filter condition:
- From Property, select the device property to filter by (for example, Active Directory Path).
- From Operator, select the comparison operator (for example, contains).
- In Value, enter the value to match.
(Optional) Add additional conditions if you selected Multiple condition (AND).
Select Apply filter to preview the targeted devices.
Review the Preview of dynamically applicable targeted devices section.
- If devices match the conditions, they are listed in the preview.
- If no devices match, the preview displays No Data Available.
Review the message at the bottom of the widget indicating how many devices will be dynamically added to the group.
Select Create device group.
The device group is created. Devices that match the defined filter conditions are automatically added to the group and updated dynamically over time.

Note:

To remove all filter conditions and start over, select Remove all.
Changes in device properties may cause devices to be added to or removed from the group automatically.