Release Notes

Learn about the updates, new features, and administrative capabilities introduced across BigFix SaaS Remediate releases. Select a release version to view the latest enhancements to your environment.

26.09.1

This release introduces new capabilities for BigFix administrators to author custom Fixlets for targeted assessment and remediation and to define custom analyses and properties for extended reporting of device attributes. These enhancements provide greater flexibility to evaluate unique device metrics and enforce specialized security policies across managed endpoints. Additionally, this update expands the suite of Preview applications with the introduction of Remote Control (beginning with Remote Share) and Agent Query.

  • Analyses

    The new Analyses capability allows administrators to report on extended device attributes across their deployment.

    Key feature highlights include:

    • Out of the box Analyses: Many out of the box analyses are included that can be easily activated to begin data collection of various extended device attributes across many use cases.
    • Property Authoring: Create, edit, and manage custom properties for use in custom analyses to collect additional endpoint configurations, hardware details, or software states.
    • Targeted Scoping: Apply relevance targeting to to ensure data is only collected from applicable endpoints.

      For more information, see Analyses

  • Custom Fixlets

    BigFix Administrators can now author and deploy custom Fixlets to address unique remediation, software deployment, and configuration management requirements.

    • Custom Detection Logic: Relevance is used to accurately identify non-compliant, misconfigured, or vulnerable endpoints across the managed environment.
    • Tailored Action Scripts: Write and execute custom action scripts to perform precise remediation tasks, deploy proprietary software or binaries to remediate issues, or enforce organizational security baselines.
    • Content Management: Create, modify, duplicate, and delete custom Fixlets within the SaaS console to maintain an up-to-date repository of organizational policies.
    • Precise Targeting: Deploy custom Fixlet actions to explicit device lists or dynamically evaluated groups, ensuring modifications only affect the intended systems.

      For more information, see Custom Fixlets

  • Preview Apps
    This release expands the SaaS console with new Preview applications, granting administrators early access to advanced real-time investigation and troubleshooting tools.
    Note:
    Preview applications are pre-releases or 'beta' versions that are not yet officially supported.
  • Deployment Automation: Enables customers to roll out patches, updates, and configuration changes defined in Fixlet Streams in controlled phases, starting with a small pilot group. Built-in orchestration evaluates success thresholds at each ring and proceeds to the next phase only when results meet your criteria. This reduces risk, limits the impact of faulty changes, and gives operations teams greater confidence and control.
  • Remote Control (beginning with Remote Share)*: Establish secure, direct connections to assist end-users, and resolve complex issues in real time. This capability is currently limited to remote share or viewing sessions with remote control coming in future versions.
  • Real-Time Agent Query*: Execute on-demand queries directly against BigFix agents to instantly retrieve live data on almost anything on the device including for instance, system states, registry values, running process information, active network connections, and file details without waiting for standard reporting cycles.
  • MCP Server Download: This Preview app allows you to download the BigFix SaaS MCP Server. Once installed locally, it connects your AI assistant to BigFix SaaS, enabling you to query information and perform common BigFix tasks in plain language instead of navigating the console or writing API calls.
  • CVE Search: Understand your exposure to vulnerabilities identified by BigFix across managed endpoints, and identify the available Fixlets to remediate them.
    Note:
    *: These preview applications may require purchasing additional product licenses for their continued use once they become generally available.

26.06.2

This release introduces new capabilities for BigFix administrators to expand operating system support and streamline Fixlet selection for Windows and Microsoft applications.

  • Fixlet Streams

    Added support for Ubuntu 24, and introduced a single option for all Windows and Microsoft applications to streamline Fixlet selection.

26.06.1

This release introduces new capabilities for BigFix administrators to migrate on-premises agents, manually ingest external vulnerability data, manage concurrent workspace sessions, and evaluate early-release applications.

  • Agent Migration Support

    BigFix SaaS now includes the ability to quickly and easily migrate agents from on-premises instances of BigFix to SaaS, along with the ability to track and monitor migrations.

    For more information, see Migrate.

  • Preview Applications

    This version of BigFix SaaS includes pre-release versions of new applications and capabilities in the form of 'Preview Applications' (accessible via the navigation bar). The purpose is to deliver early iterations of new capabilities, gauge interest, and quickly improve them based on feedback. While they are not yet officially supported capabilities (they are provided 'as-is'), we want to hear from you on how well they work and, of course, any ways we might improve them.

    Note:
    These applications may include capabilities that will require purchasing additional product licenses for their continued use once they become generally available. Where possible, such cases will be clearly identified upfront.

    Available Preview applications include:

    • Patch Download Plugins: Enables the deployment of patches that require additional configuration or vendor entitlements. Route content downloads securely through your BigFix Root Server by configuring plugins for CentOS, Oracle Enterprise Linux (OEL), Red Hat Enterprise Linux (RHEL), and Rocky Linux.

    • Security Configuration Compliance Checklist Reporting:(expected to require additional product entitlements when made generally available) Report on and continuously improve your devices' compliance for security configuration benchmarks, including CIS, DISA STIG, PCI, NIS2, and HIPAA. Evaluate device compliance across your environment using curated security checklists and drill down into specific configuration checks.
    • Software Distribution:(expected to require additional product entitlements when made generally available) While BigFix SaaS Remediate comes with an installation and update library for hundreds of software titles, Software Distribution enables you to deploy and update any software to your devices, including custom or in-house-developed software.
  • Integrated Vulnerability Remediation (IVR) - Universal Import

    IVR in BigFix SaaS Remediate now includes the ability to import vulnerability detection data using flat-file exports in CSV format from third-party sources (such as Tenable, Qualys, Rapid7, and CrowdStrike) to enable streamlined workflows and greatly reduce remediation times.

    For more information, see Manually Importing Vulnerabilities

  • Improved UI Navigation

    BigFix SaaS now includes support for URL routing. This enables standard browser functions such as refresh, back/forward navigation with breadcrumbs, multi-tab navigation, and deep link sharing.