BigFix has a proven track record in providing security and IT operation solutions to government. Whether it's for a federal civilian agency, the Department of Defense, the Intelligence Community or state and local governments, BigFix has a proven real-time situational awareness and remediation platform for all IT assets regardless of OS, location or network connectivity status. The BigFix Unified Management Console delivers over 18 solutions for critical IT initiatives using a single agent and console (for up to 250K endpoints) for mandates such as:
Best of all, BigFix is compliant under the following certifications and available for procurement as follows:
SCAP: Federal Desktop Core Configuration (FDCC)
BigFix’s high performance technology has achieved multiple certifications from the National Institute of Standards and Technology (NIST) and offers federal agencies a comprehensive, low-cost approach for continuous assessment against the Federal Desktop Core Configuration standard.
- FDCC Scanner
- Mis-configuration Database
- Mis-configuration Remediation
- Authenticated Configuration Scanner
- Authenticated Vulnerability & Patch Scanner
- Common Configuration Enumeration (CCE)
Specifically designed for the FDCC standard, the BigFix Security Configuration Management (SCM) solution addresses the regulatory need for complying to FDCC, the ability to prove compliance across all systems connected or not connected to agency infrastructure, and the operational need to maintain centralized visibility and enforce policy in real-time. Agencies can easily and quickly assess the systems throughout their infrastructure and remediate systems identified as non-compliant to the FDCC standard.
The FDCC standard affects all federal agency procurements of information technology. An effective solution must meet these requirements:
- Accurately and comprehensively inventory agency desktops and laptops.
- Identify systems that are non-compliant to the FDCC standard.
- Clearly report on deviations from the FDCC standard by providing both human-readable reporting and machine-readable results that can be delivered to NIST and the Office of Management and Budget (OMB).
- Provide confidence that results are complete and accurate.
- Remediate systems that have drifted from FDCC compliance.
Agencies are required to leverage automated tools for assessment of FDCC configurations, but have the freedom to remediate systems using a manual approach. By leveraging the BigFix solution, federal agencies can automate the assessment and remediation process through a single, unified management console, enabling process improvements, tremendous cost savings, and improved accuracy. With BigFix, agencies can easily meet and even exceed requirements while spending a small fraction of the cost required for manual remediation.

Trusted Internet Connection (TIC)
BigFix is a real time, cross platform solution providing granular visibility into hundreds of properties of each computer on the network. The Bigfix Security Platform is based on a FIPS 140-2 Level 2 certified platform that is NIST SCAP certified for both scanning and remediation.
FDCC configurations will be a requirement for the TIC initiative.
ITIL/ITSM
In order for an enterprise service desk to fulfill the promises of ITIL efficiency & cost reduction, it requires trusted sources of reliable asset information in real time or near real time.
In order to secure the enterprise and achieve ITIL security goals, organizations must know exactly what assets they own, know where they're located, and who should and should not have access them. Bigfix helps organizations realize the potential of ITIL by providing a “single source of truth” for both IT hardware and software detail, including configuration settings for multiple OS servers, laptops, workstations and eventually mobile devices.
The Bigfix Management Platform provides an open API and SOAP interface, enabling customers to quickly create a closed loop change control system. BigFix is integrated with leading service desk products, such as BMC Remedy and CMDBs, providing a real time data feed for configuration items (CI).
Green IT
The BigFix Power Management module has been selected by DOE, EPA, GSA and many other government agencies, providing cost savings of $20 - $40 per year, per desktop.
When the BigFix Power Management module is included with Bigfix standard or custom solution packs, it positions Power Management to essentially pay for the entire Bigfix suite within one year.
Bigfix Power Management offers a unique Wake-on-LAN feature that provides flexibility & cost savings to organizations that perform endpoint management functions, including patch management during off peak or non-working hours/days.
Asset Visibility and Management
Organizations need to know what assets they own, where they are, and who should have access to them. Yet enterprises pay millions of dollars in litigation costs every year for software that’s not properly licensed.
Bigfix offers powerful tools, such as DSS SAM and Asset Discovery, that provide continuous, real-time asset visibility with minimal network impact. These tools are simple to use, extensive in functionality, and quick to implement, thereby reducing risk and saving money.
Program Support
Most government organizations require that procurement shops include performance goals/measure in new Programs and task orders. This helps protect the government from non-performing contractors by holding them accountable to specific SLAs that include cost reduction, efficiency and other measures.
Integrators and contractors (and the government) that either Prime or sub who recognize the advantages provided by Bigfix’s real time agent and near real time management capabilities will all gain by incorporating the unique capabilities into the existing requirements responses.
Not only do bidders increase their chances of wining the business but also increasing their upfront and continuing ROI.
For example, most Patch SLA’s are based on patch success/failure confirmations measured in several hours and usually days – those that include Bigfix’s near real time confirmation should expect to exceed expectations/requirements and reap the financial rewards.
When Power management is included in the response the bidder can essentially offer the Bigfix solution at no cost in year one. The same is true with DSS SAM.
Situational Awareness
Situational awareness is the ability to quickly understand environmental variables and use these to make informed decisions. Read this white paper to see how BigFix combines real-time intelligence with the power and control to make informed change within computing environments.