Home › Products ›

Security Configuration Management

You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialise correctly.

In addition to protecting against increasingly stealthy threats, companies need to prove compliance with regulatory standards and corporate best practices. Most organizations are struggling to get accurate, up-to-date information about the assets in their environment and details about their configuration. Managing desktops, laptops, and servers within these constraints has proven to be a huge obstacle to achieving and maintaining compliance.

Many approaches fail to provide reliable compliance, and put organizations in constant "reactive" fire fighting mode. Additionally, these approaches often require inefficient processes that are too complex and expensive. Long and painful cycles attempt to address and fix configurations, and non-integrated product point silos offer disparate, uncorrelated data.

BigFix Security Configuration Management (SCM) brings verified real-time visibility, automated configuration remediation, and global scalability to the IT policies and standards compliance process. Because the BigFix single agent continually monitors the endpoint - whether it's connected to the network or not - BigFix customers can maintain continuous compliance before, during and after the audit.

What is BigFix Security Configuration Management (SCM)?

Offered as either a stand-alone product or as part of the Security Configuration and Vulnerability Management suite, BigFix SCM is one of the few products that has achieved Security Content Automation Protocol (SCAP) Validation through the National Institute of Standards and Technology (NIST) for both mis-configuration assessment and remediation. By offering a comprehensive library of technical controls, BigFix's SCM helps organizations achieve IT security compliance by detecting and enforcing security configuration policies using industry best practices. The BigFix SCM policy libraries enable rapid implementation of compliance solutions conforming to individual customer requirements.

Security Configuration Management Dashboard

Features and Benefits

  • Continuously enforce security configuration baselines on hundreds of thousands of workstations, servers, and mobile devices worldwide—all from a single point of control
  • Report, remediate, and confirm remediation of non-compliant assets in real time
  • Comprehensive “Always Current” view to cover all computing machines—even remote and mobile endpoints
  • Single, centralized console view for real-time visibility into the current configuration posture of all endpoints
  • Out-of-the-box checklists containing hundreds of standard configuration settings mapped to industry standards, such as Federal Desktop Core Configuration (FDCC), Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG), etc.