Vulnerability Management

Despite advances in security technology, managing system and application vulnerabilities continues to challenge IT professionals. Identifying potential exposures and remediating them prior to exploitation requires tight coordination between IT security and IT operations. Additionally, real-time visibility, automated remediation, and accurate reporting and validation are essential to reducing risk and demonstrating compliance.

By integrating accurate, real-time vulnerability assessment with automated remediation and compliance reporting, BigFix Vulnerability Management allows IT staff to stay way ahead of threats – bridging the gap between IT security and IT operations.

What is BigFix Vulnerability Management?

Offered as part of the BigFix Security Configuration and Vulnerability Management suite, BigFix Vulnerability Management reduces risk across the enterprise for all assets, whether they are fixed or mobile, desktops, laptops or servers. Through a repository of vulnerability assessment policies, BigFix provides organizations with the ability to assess their managed systems against OVAL-based vulnerability definitions. Each managed endpoint quietly and continuously evaluates the state of the endpoint, and reports on any non-compliant policy in real-time by leveraging the power of BigFix Unified Management platform. BigFix Vulnerability Management brings unparalleled visibility throughout the entire discover-assess-remediate-report lifecycle. Additionally, the BigFix high performance architecture enables the industry’s fastest time to remediation and closely bridges assessment with remediatiation by applying necessary patch and configuration policies.

Features and Benefits

• Assess managed endpoints against known vulnerabilities using pre-defined, out-of-the-box OVAL-based policy definitions
• Identify and eliminate known vulnerabilities across hundreds of thousands of endpoints using automated policy enforcement or manual deployment
• Continuously enforce policies on or off the network
• Map all vulnerabilities to industry standards to provide CVE and CVSS references and links to the National Vulnerability Database (NVD)
• Integrate with BigFix Patch Management and Security Configuration Management for comprehensive assessment and remediation of identified vulnerabilities
• Create flexible, on-demand ad-hoc custom queries and reports