What Does BigFix Offer? Visibility and control. In a world accustomed to multiple, fragmented technologies and point solutions, BigFix offers an alternative: the industry's only unified management platform that automates and streamlines systems and security management while delivering whole new levels of speed, visibility, and control.

With BigFix's unified management model, customers can radically simplify and automate infrastructure management, saving costs and improving service delivery.

• Automation. Many unnecessary operational tasks can be eliminated and others significantly streamlined, resulting in abbreviated cycle times. Patch management process cycle times, for example, can typically be compressed by 80%.
• Consolidation. Multiple management infrastructures can be consolidated and, over time, eliminated. It is not uncommon for BigFix to replace from five to ten other agent technologies and their management infrastructures.
• Better Decision Making. With BigFix as the "single source of truth" on the state of computing assets, IT makes better and timelier decisions on security policies, asset purchases and allocation, compliance policies, device configurations, etc.
• Faster Skills Development. With a single management approach and system to learn, training of operations team members is simplified.

As customers adopt BigFix and automate their processes, they dramatically improve the quality and efficiency of their infrastructure management processes.

Protecting endpoints from the wide variety of sophisticated threats coming through the Web, e-mail, and files requires many different approaches. This has resulted in organizations deploying a number of tools that may lack 100% coverage and a clear, consolidated view of the organization's risks. At the same time, organizations must minimize endpoint and bandwidth utilization across large, highly distributed, mobile, and sometimes fragile networks.

What's Included?

 The BigFix Endpoint Protection Suite provides a new approach to endpoint protection with Trend Micro's Smart Protection Network. Instead of relying on malware signatures that must be distributed and maintained on every endpoint, Trend Micro Web Protection and Core Protection will move threat analysis and prevention to the cloud for improved speed and reduced risk.

The BigFix Endpoint Protection Suite combines Trend Micro's leading anti-malware content with the BigFix Unified Management Platform and additional BigFix endpoint protection tools to provide organizations with a complete set of integrated management tools for cost-effective, proactive endpoint security - all from a single management console.

 Specifically included are:

• Anti-Virus / Anti-Malware
• Client Manager for Endpoint Protection
• Network Access Control
• Endpoint Firewall
• Web Protection

The Endpoint Protection Suite is also fully integrated with BigFix's Security Configuration & Vulnerability Management and Systems Lifecycle Management capabilities for end-to-end protection, compliance, and management

Why BigFix?

The BigFix platform is architected to use a single, intelligent agent for all solutions. This ensures continuous, real-time assessment and remediation, regardless of whether the endpoint is connected to the network. For example, Network Access Control is about reduced quarantines and faster connection times. The architecture also minimizes network bandwidth usage, while the agent consumes on average less than 2% of endpoint CPU. This makes the BigFix solution extremely scalable. It offers visibility and control to every endpoint on the network, and a single management server can support 250,000 or more endpoints.

A single infrastructure also makes administration and consolidated reporting possible. New content, like anti-virus signatures, is provided to the entire network in minutes with real-time results automatically reported back. Other content, such as reputation-based malicious websites, is managed in-the-cloud, eliminating the need for updates.

These combined features make BigFix the most comprehensive, lowest total cost of ownership endpoint protection solution available today.

When it comes to security and vulnerability management, there's a big difference between identifying problems and resolving them. Or better yet, preventing them. Enterprises want to protect their environments from threats. IT organizations struggle to balance security and industry compliance. How do you protect your environment? How do you report on compliance to get approval from regulators? You need a solution that provides real-time visibility and enforcement into security configurations and settings enterprise-wide.

What's Included?

BigFix Security Configuration and Vulnerability Management (SCVM) consolidates a suite of services, including vulnerability management, automated security configuration management, and security patch management to cut costs, reduce complexity, and lower security risks. The product components in the BigFix SCVM suite include:

• BigFix Security Configuration Management (SCM) provides a comprehensive set of configuration settings to help IT staff achieve compliance and best practices goals through assessment and enforcement of security policies on their endpoints.
• BigFix Vulnerability Management empowers IT organizations to discover, assess, and remediate vulnerabilities at unparalleled scale and speed.
• BigFix Patch Management collapses patch and update time scales, reduces staff workloads, cuts costs, and increases the effectiveness of operating system and application patch processes.
• BigFix Asset Discovery identifies suspicious or rogue systems entering your network for proactive risk reduction and continuous policy enforcement.
• BigFix Device Control provides organizations with the ability to see, manage, modify, enforce, and report on access and usage of portable devices on all endpoints.

Why BigFix?

BigFix Security Configuration and Vulnerability Management (SCVM) delivers continuous compliance and risk reduction - at scale and at speeds to enable a low overall cost of ownership. With BigFix's distributed intelligence, organizations can see, change, enforce, and report on security policies and system configurations of endpoint devices in real-time on a global scale. BigFix SCVM allows IT organizations to implement critical security and vulnerability management functions for all endpoints from the single unified management console, with fine-grained reporting and intuitive compliance dashboards.

Enterprises of all sizes pay millions of dollars each year in settlements and litigation because they don’t know exactly how many copies of what software is installed and where. Industry research suggests that 30% of software dollars are misspent due to lack of visibility into software purchases vs. software need. Those companies that are practicing diligent IT asset management often use inefficient tools that require specialized skills that incur high labor costs, lost productivity, and bottlenecks in IT operations.

BigFix Decision Support System Software Asset Management (DSS SAM) immediately helps companies save money and reduce risk. By leveraging the real-time visibility afforded by patented BigFix technology, DSS SAM provides a straightforward and comprehensive view into software assets. Because the tool is simple to use and has extensive and precise information about IT assets, enterprises can use it for continuous asset assessment and reporting rather than episodic and ineffective asset management projects.

What is BigFix DSS SAM?

Offered as an add-on for the Systems Lifecycle Management suite, BigFix DSS SAM is a powerful solution for discovering all the software installed on desktops, laptops and servers. It correlates information on software usage with license contractual information for immediate, accurate and automated license "true-ups". By identifying precise information on software licensing and usage, noncompliant use of software is immediately flagged for removal, reducing risk enterprise-wide.

Features and Benefits

• Support contract negotiations, vendor audits and IT budget planning
• Accurately identify software and validate software license compliance
• Discover and eliminate unauthorized or risky applications
• Reduce overspending and reallocate software based on usage trends
• Feed your asset repository and CMDB with deep, accurate, and fresh data

Managing the care and feeding of hundreds of thousands of network devices presents a formidable task for IT organizations. Even a simple question such as, "How many computers do you have?" can generate a variety of responses. Most organizations struggle with these basic questions about their computing environment:

• How do you set up specific endpoints to meet a certain security configuration?
• How do you ensure that users within a certain role are running the correct version of an application?
• How do you deploy patches in a way that minimizes downtime?

What's Included?

BigFix Systems Lifecycle Management streamlines IT operational tasks with a lightweight, single-agent, single-console framework. The suite includes the following product components:

• BigFix Asset Discovery provides visibility into all IP-enabled devices on your network.
• BigFix Asset Inventory offers deep inspection capabilities to report on hundreds of hardware and software attributes out of the box, across platforms, in real time, at massive scale.
• BigFix Patch Management collapses patch and update time scales, reduces staff workloads, cuts cost, and increases the effectiveness of patch processes.
• BigFix Power Management delivers significant energy cost savings and reduces carbon emissions through enterprise-wide desktop system power conservation.
• BigFix Remote Control configures and manages Microsoft Windows Remote Desktop and Remote Assistance functionality.
• BigFix Software Distribution automates and adds new levels of assurance to the software deployment process.
• BigFix Software Asset Management helps enterprises identify under-used software to manage costs, and over-used licenses to stay on the right side of software license agreements.
• BigFix OS Deployment, an optional component, provides bare-metal imaging and provisioning for operating systems.

• BigFix Device Management for Windows Mobile enables configuration, encryption, and software distribution management by optimizing the BigFix Windows Agent for the mobile platform

Why BigFix?

Powered by the real-time visibility and control of the BigFix unified management platform, BigFix Systems Lifecycle Management brings cost-savings to key IT functions critical at each stage of the systems lifecycle - for desktops, servers and roaming laptops. Consolidating and streamlining the most common IT operational tasks, BigFix delivers the highest levels of automation combined with fine-grained accuracy, enabling IT departments to maintain service levels, focus on critical issues, and ensure overall operating efficiency.

What is BigFix's Unified Management Platform?

Purpose-built for today's distributed enterprise, BigFix's Unified Management Platform provides real-time visibility and control through a single infrastructure, single agent, and unified console for systems lifecycle management, endpoint protection, and security configuration and vulnerability management. The BigFix platform is designed to continuously discover, assess, remediate, and enforce the health and security of servers, desktops, and roaming laptops in real-time via a single, policy-driven agent and single console.

BigFix's patented technology distributes computing power to the devices themselves, using the intelligent BigFix Agent to provide a level of visibility and control not possible in legacy solutions. This level of innovation translates into significant advantages in speed, flexibility, and scalability, while reducing the infrastructure and training costs associated with traditional systems and security management.

How Does It Work?

The power of the BigFix platform derives from key features that reduce cost, maximize ROI, and improve efficiency. The platform includes the following components:

• The BigFix Agent is the brain of the BigFix platform. Continuously assessing the endpoint and enforcing policy regardless of connectivity, this single, multi-purpose agent represents a radical departure from legacy client-server architectures by powering a resilient distributed intelligence infrastructure.
• The BigFix Server stores the real-time view of the configuration and posture of all BigFix Agents. It acts as the single point of contact to the Internet, monitoring and gathering policy content streams and distributing them to BigFix Agents.
• The BigFix Console is the command center from which information on the state of all network computers can be viewed and policies can be defined in real time.
• BigFix Policies, also known as Fixlet Messages®, communicate policy information between BigFix Agents and BigFix Server environments. BigFix Policy Messages can contain logical criteria to trigger specific actions—for example, “if vulnerability X exists on this client, update software module Y with the appropriate package.” Customers can use BigFix-provided policies or customize their own.
• BigFix Relays provide distributed points of communication, aggregation and staging for BigFix Policy Messages and patch/remediation content. They help reduce network bandwidth requirements and provide added fault-tolerance to BigFix-based management systems. BigFix Relays can be installed on existing hardware, including desktops and multi-purpose systems such as file or print servers. No dedicated hardware is required, and deployment takes minutes rather than months without disruptive network configuration changes.