Security Configuration and Vulnerability Management
Consolidate key security configuration management services including security patch management, application execution controls (white and black lists), vulnerability management, and automated security configuration management to cut costs, reduce complexity, lower security risks and move information security programs from reactive fire-fighting to proactive, preemptive risk management.
Features
- Continuous enforcement of security policies regardless of network connection status
- IP-enabled and rogue network device discovery
- Host-based vulnerability assessment with severity scoring
- Hardware and software inventory and software usage tracking
- Security patch management and security updates for major operating systems and common commercially-available applications
- Define and assess client compliance to security configuration baselines
- Define and enforce security policies and “dress codes"
- Maintain policies and standard configurations on mobile computers on- or off-enterprise networks
- SANS, STIGS, NIST, Microsoft, and BigFix security best practices
- Optional policies for DISA STIG and FDCC compliance
|
Benefits
- Consolidate and simplify key information security services enterprise-wide
- Real-time visibility into security-critical endpoint client (desktop, mobile/laptop, Server) configuration specifications
- Manage heterogeneous (Microsoft Windows, Unix, Linux, Mac OS) asset bases from the BigFix Console
- Shorten remediation cycles (patch, software update, vulnerability fixes) from weeks to days and hours
- Extend security management to mobile clients on- or off-enterprise network
- Set alarms to instantly notify administrators of anomalous conditions or suspected rogue activities
- “Instant on" for immediate implementation
- Enhance and improve effectiveness of widely available security configuration management solutions such as BMC Marimba, HP Business Technology Optimization, IBM Tivoli, Microsoft Windows SMS/SUS/SCCM, etc.
- Connect BigFix system configuration data to third party correlation and reporting tools for in-depth, custom analyses
|
Key solution pack components include:
|
 |
