http://forum.bigfix.com BigFix User Group en http://backend.userland.com/rss http://forum.bigfix.com/viewtopic.php?pid=15333#15333 15333@http://forum.bigfix.com Topic: Taking actions with a time constraint using an absolute time zone Message: You can currently constrain an action taken from the BES Console to start and end at a certain date and time, to only run between certain times within the day, and to only run on certain days of the week.  All these constraints are evaluated by the clients in their own local time zones.  We've received many requests for being able to specify an absolute time zone, such that all clients will run the action at the same time, regardless of what time zone they're in.There are two different ways to specify this 'absolute time':1) As an offset from GMT, like '-0800'.  This wouldn't be adjusted for changes in daylight saving time.2) As a region, as you would specify when editing the time zone on a Windows system, where a setting would look like '(GMT-08:00) Pacific Time (US & Canada)'.  This would be adjusted for changes in daylight saving time.The second option introduces additional complexity beyond that of the first option, and we're not sure whether users will want the automatic adjustment.  Would anyone like to give us some feedback about which option to choose?Thanks,Jeremy Thu, 10 Sep 2009 11:59:50 -0700 http://forum.bigfix.com/viewtopic.php?pid=12902#12902 12902@http://forum.bigfix.com Topic: BES operator certification Message: I would be interested. Wed, 20 May 2009 16:41:18 -0700 http://forum.bigfix.com/viewtopic.php?pid=12881#12881 12881@http://forum.bigfix.com Topic: BES operator certification Message: Yes, I am. Next week I will be taking the 202 course and then will have completed 101, 201, & 202. Just wondering what else was available. Tue, 19 May 2009 19:01:18 -0700 http://forum.bigfix.com/viewtopic.php?pid=12879#12879 12879@http://forum.bigfix.com Topic: BES operator certification Message: The short answer is that we have lots of training, but not a formal program that ends with a certificate... Are you guys asking because you are interested in an official BigFix certification program like the one MS/Cisco/etc have?Ben Tue, 19 May 2009 18:45:23 -0700 http://forum.bigfix.com/viewtopic.php?pid=12873#12873 12873@http://forum.bigfix.com Topic: BES operator certification Message: Yes, what ever happened to this?  I see this link exists, but it just goes to the Training page.http://www.bigfix.com/content/certification Tue, 19 May 2009 09:55:29 -0700 http://forum.bigfix.com/viewtopic.php?pid=12107#12107 12107@http://forum.bigfix.com Topic: BES operator certification Message: Hey Guys, did any exam get produced in the end? Tue, 07 Apr 2009 06:13:00 -0700 http://forum.bigfix.com/viewtopic.php?pid=7552#7552 7552@http://forum.bigfix.com Topic: BES operator certification Message: BCOI'm sure it will revolve mainly around relevance, but besides that...- Able to navigate the console and know where things are and the difference between Fixlets, Tasks, and Analysys- Able to roll out and roll back patches- Know how to setup a system of relays which could include slow links- Know how to troubleshoot a patch/app push (Follow the logs on server, relays, clients)- How to stop and archive actions- Best practice for a smooth running system (not too many option actions, only the analysi you need turned on, Use the BigFix deployment health check)- How to setup operators/reset passwords- Something the other about the web console... Like when to use it and when to avoid it...- how to mass deploy the agents?more Wed, 16 Apr 2008 13:09:26 -0700 http://forum.bigfix.com/viewtopic.php?pid=3295#3295 3295@http://forum.bigfix.com Topic: BES operator certification Message: Hello BigFix user community,After many requests from the field, the Professional Services group at BigFix is working on the creation of a Certification program. This would be a program of instruction and testing focused on the BigFix Enterprise Suite that would result in the award of an official certification from BigFix. I am not at liberty to discuss the ideas that we are considering as part of the program but I would like to give our user community here a chance to give us suggestions and ideas. What abilities would you expect a BigFix certified operator to have?Have you gone through a certification program before? What did you like or not like? Were there approaches that were engaging or especially effective? Was the training web based or in person or both? Was the testing web based or in person or both?  Do you have a great test question? Was there a lab session?  Would you want to come to the BigFix HQ for your certification or some local facility?These are the sort of things that I am most interested in but you can provide any input you feel merits our attention. You can reply in this thread or of you prefer lend your input in a more private fashion you can e-mail them to me at john_talbert@bigfix.com and I will share them with the team.Cheers,Brolly Wed, 18 Apr 2007 16:56:49 -0700 http://forum.bigfix.com/viewtopic.php?pid=961#961 961@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: Existing “Patches for Windows” content has been updated to add the discussed tags. Future re-released and superseded content will also follow this new policy. Similar title changes will be made across non-Windows patch sites over the next 4-6 weeks. Thanks to everyone who provided feedback! Thu, 05 Oct 2006 14:43:45 -0700 http://forum.bigfix.com/viewtopic.php?pid=781#781 781@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: Rolf.Wilhelm wrote:Maybe it is possible to support additional properties like "OS", "version", "superseeded by" or "superseeding" and "last version date". These fields should be searchable. Rolf, those additional properties are all good ideas, if and when we add that capability into BES, we will probably compile a list of Fixlet properties we are considering and solicit more feedback from customers on this forum. Rolf.Wilhelm wrote:From my point of view, I would like to see the OS-Version for a fixlet in first part unless you do not support multi version fixlets for different OS releases, e.g."MS06-040: W2K/SP4 - xyz...." This is a valid request, some customers may care more about the "OS Version" than the bulletin title. However, due to various reasons the placement of the "OS Version" is not likely to change right now.  I think the right solution is to allow each customer to customize this according to their own needs. Perhaps in a later version of BES, once we support additional Fixlet fields, we will provide the ability to display only fields you are interested in, and re-order the fields arbitrarily in various views and reports. I will file a feature request for this. Tue, 26 Sep 2006 15:16:10 -0700 http://forum.bigfix.com/viewtopic.php?pid=770#770 770@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: Tim,I appreciate that clarification in the first version.Maybe it is possible to support additional properties like "OS", "version", "superseeded by" or "superseeding" and "last version date". These fields should be searchable.From my point of view, I would like to see the OS-Version for a fixlet in first part unless you do not support multi version fixlets for different OS releases, e.g."MS06-040: W2K/SP4 - xyz...."Regards,  Rolf. Tue, 26 Sep 2006 05:09:20 -0700 http://forum.bigfix.com/viewtopic.php?pid=762#762 762@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: There has been some internal feedback to include more information about the re-release in the title. We are now planning to add the re-release date as well:Re-released:MS06-042: Cumulative Security Update for Internet Explorer - IE 5.01 SP4 - Windows 2000 SP4 (v3, re-released 9/12/2006)MS06-042: CORRUPT PATCH - IE 5.01 SP4 - Windows 2000 SP4 (v3, re-released 9/12/2006)MS06-042: REVISED PATCH - IE 5.01 SP4 - Windows 2000 SP4 (v3, re-released 9/12/2006)Superseded and Re-released:MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service - Windows XP (v2, re-released 6/14/2006) (Superseded)MS05-019: REVISED PATCH - Windows XP (v2, re-released 6/14/2006) (Superseded) Mon, 25 Sep 2006 17:57:58 -0700 http://forum.bigfix.com/viewtopic.php?pid=761#761 761@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: brolly33 wrote:While we are on the topic of naming, it would be nice to have sortable columns for each of the pertinent pieces of data that currently appear in the fixlet name field. OS, component (office, IE, system), REVISED (t/f), SUPERCEEDED (t/f), CORRUPT (t/f), MS#, Language, Version/release. I have wished at times for a way to get all the superseded fixlets into a single list so that I could check policy actions and baselines in order to update or remove them as needed. Thanks for the feedback Brolly, we have received similar suggestions for additional sortable Fixlet columns, it is one of the enhancements currently being considered for BES 6.1. Mon, 25 Sep 2006 17:57:16 -0700 http://forum.bigfix.com/viewtopic.php?pid=743#743 743@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: Tim,I think that adding the (v#) and (Superseded) tags to the end of the description is helpful information to have easily available in the console and works well within the scope of the current naming convention.While we are on the topic of naming, it would be nice to have sortable columns for each of the pertinent pieces of data that currently appear in the fixlet name field. OS, component (office, IE, system), REVISED (t/f), SUPERCEEDED (t/f), CORRUPT (t/f), MS#, Language, Version/release. I have wished at times for a way to get all the superseded fixlets into a single list so that I could check policy actions and baselines in order to update or remove them as needed.Cheers,Brolly Mon, 25 Sep 2006 11:03:03 -0700 http://forum.bigfix.com/viewtopic.php?pid=741#741 741@http://forum.bigfix.com Topic: Update to the Fixlet Title Policy for “Patches for Windows” Sites Message: Microsoft re-released two Critical Security Bulletins in September, one of them (MS06-042) was actually a “re-re-release” (version 3 of the updates). Many customers were confused by this and we received various inquiries asking us to help identify the correct Fixlet messages to deploy. To help BES operators distinguish between different sets of Fixlet messages, we are considering changing our Fixlet title policy to tag re-released and superseded updates. Fixlet messages in the “Patches for Windows” sites that deploy re-released and/or superseded updates will have their Fixlet titles modified.Examples:Superseded:MS05-016: Vulnerability in Windows Shell that Could Allow Remote Code Execution - Windows Server 2003 (Superseded)MS05-016: CORRUPT PATCH - Windows Server 2003 (Superseded)MS05-023: Vulnerabilities in Microsoft Word May Lead to Remote Code Execution - Office 2003 (Local/Network Install) (Superseded)Re-released:MS06-042: Cumulative Security Update for Internet Explorer - IE 5.01 SP4 - Windows 2000 SP4 (v3)MS06-042: CORRUPT PATCH - IE 5.01 SP4 - Windows 2000 SP4 (v3)MS06-042: REVISED PATCH - IE 5.01 SP4 - Windows 2000 SP4 (v3)Superseded and Re-released:MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service - Windows XP (v2) (Superseded)MS05-019: REVISED PATCH - Windows XP (v2) (Superseded)Please let us know what you think of this change. Will this be helpful? Does the proposed naming scheme work? Are there other tags that we should consider adding to the Fixlet titles? We are looking to make this change in early October, so any feedback you provide will be very helpful! Mon, 25 Sep 2006 09:30:32 -0700