BigFix Client Compliance (IPSec Framework) to be updated on 02.17.10

(imported topic written by Jim_Hansen91)

The BigFix Client Compliance (IPSec Framework) site will be updated on February 17, 2010 and will include several new updates and changes that users should be aware of. The changes include:

*Expanded platform support – BigFix Client Compliance Quarantine capabilities have been expanded to include Windows Vista, Windows 7, Windows 2003, and Windows 2008/R2. Several new Fixlets and tasks have been added to facilitate this new capability.

  • Windows Firewall – BigFix client quarantine capability is still used to quarantine Windows 2000, Windows XP, and Server 2003 systems. Newer operating systems, including Windows 7 and Windows 2008/R2 will now leverage the Windows Firewall in addition to IPSec capabilities.

*Content Title Changes – Names for Fixlets, Tasks and Analyses have been changed from starting with ‘IPSec -’ to starting with ‘Quarantine -’ to reflect that IPSec is no longer the only technology used to quarantine. The names of the analyses properties have also changed slightly.

Please contact BigFix technical support with any questions or concerns related to this release.

  • BigFix Application Engineering

(imported comment written by Jim_Hansen91)

BigFix Community,

We are very pleased to announce a few updates to the ‘+BigFix Client Compliance (IPSec Framework)+’ and ‘+BES Client API Configuration+’ sites.

WHAT IS THE BIGFIX CLIENT COMPLIANCE FEATURE SET?

The BigFix Client Compliance site is made available as part of our Endpoint Protection solution pack and enables customers to identify and quarantine systems that are found to be non-compliant or otherwise infected from a virus or zero day attack. This capability has historically been used in conjunction with Network Access Control solutions or to quickly measure and isolate systems that have been infected with malware such as zero day exploits. When quarantined, the systems will be blocked from all incoming and outgoing communication to prevent potential spread, but will be allowed to talk to BigFix to be remediated. Once resolved or brought back into compliance, the systems can be un-quarantined and allowed back on the network infrastructure safely.

WHAT ARE THE NEW FEATURES?

  1. Expanded platform support:

BigFix Client Compliance Quarantine capabilities have been expanded to include Windows Vista, Windows 7, Windows 2003, and Windows 2008/R2. Several new Fixlets and tasks have been added to facilitate this new capability.

  1. Windows Firewall:

BigFix client quarantine capability is still used to quarantine Windows 2000, Windows XP, and Server 2003 systems. Newer operating systems, including Windows 7 and Windows 2008/R2 will now leverage the Windows Firewall in addition to IPSec capabilities.

  1. Content Title Changes:

Names for Fixlets, Tasks and Analyses have been changed from starting with ‘IPSec -’ to starting with ‘Quarantine -’ to reflect that IPSec is no longer the only technology used to quarantine. The names of the analyses properties have also changed slightly.

  1. BES Client API Configuration Changes:

The ‘BES Client API Configuration’ site has been updated to remove the Windows Vista restriction previously enforced.

Please contact BigFix technical support with any questions or concerns related to this release. If you are a new customer or are interested in learning more about it, please contact your sales rep or contact sales@bigfix.com.