The BigFix Team is pleased to announce the availability of BigFix UI, a new, unified, accessible interface for BigFix operators! BigFix UI brings finding, understanding, acting, and reporting into one workflow, so your team gets the power of BigFix with improved time-to-value. It requires BigFix Platform 11.0.7 and Microsoft SQL Server 2025, and is the first step toward a more powerful BigFix experience. Your existing BigFix interfaces keep working alongside it.
The main capabilities in this release are as follows (features can be activated depending on your BigFix entitlement):
See your endpoints and act on them in one place!
- Device Explorer: View the full device list with a column chooser, advanced property filters, charts, and saved views. Device groups can be dynamic or manual.
- Device details: Open any device to see its OS, last report, relay distance, relevant Fixlets, deployments, applied properties, and its Digital Employee Experience (DEX) score. Launch a Remote Control session from within the device context.
- Fixlet Explorer: A unified view into all BigFix content, including both external and custom content. You can also create and manage custom Fixlets.
- Analyses and Sites: Manage custom sites and analyses, activate, de-activate and configure analyses.
- Deploy and Remediate wizard: Select Fixlets, choose targets, set behavior and schedule, and review a single summary before you deploy. Actions can also start directly from device groups and reports.
- Fixlet Streams: Set up a recurring patching cadence by choosing a content scope, filtering Fixlets (for example, all Critical updates from Microsoft), and targeting a dynamic or fixed group. New devices and new content are picked up automatically.
- CyberFOCUS Analytics: Review CVEs with their exposures and mapped Fixlets, then remediate one or more CVEs from a pre-filled wizard. In an internal comparison of the same CyberFOCUS vulnerability workflow, BigFix UI enabled more than 3X faster planning and execution than the existing workflow.
- Prescriptive Guidance: System-provided insights help operators focus on the most important and urgent tasks first, so they can act on what matters most.
- Notification Center: Review alerts in a drawer with an unread count, filter them by severity and keyword, and archive them.
Reporting you can act on!
-
Explorer Reports: Explorer views, configured with filters and visuals, can be saved as Reports for later use, and marked as favorites.
-
Report Builder: Create custom reports by choosing a dataset, properties, chart type, and filters, then preview and save. Every chart can switch to a table view, and you can drill down for detail. You can also start from report templates.
-
Scripted Reports: Code your custom report with session relevance and HTML/JavaScript (disabled by default).
-
Scheduled and background reports: Run reports on a cadence and email them. Large reports run as background jobs.
BigFix applications in the same interface!
- Digital Employee eXperience (DEX): Review system and application experience scores, and their trends over time. Gather employee sentiment with surveys and campaigns. Reclaim software licenses and send messages to the endpoint user. More information in the dedicated DEX announcement.
- Integrated Vulnerability Remediation (IVR): Configure access to Tenable VM, view the IVR dashboard with correlated vulnerability data, review vulnerabilities by device or by CVE, and trigger remediation workflow.
- Workflow Builder: An intuitive, visual no-code automation product built to design, sequence, and execute complex, multi-step endpoint management actions. It reduces operational time and risk, and lowers entry barrier to custom content, via a visual drag&drop canvas, execution tracking and granular governance.
- Software Distribution: View software packages in one place, with consolidated view of software entries for multiple packages belonging to the same software title. Browse and use prebuilt installation Fixlets for Windows and macOS. Configure Self-Service Application (SSA).
- Security Compliance: Monitor your environment-wide compliance posture across all deployed checklists using interactive charts and live dashboards. Apply global filters to scope and save custom views, analyze compliance at the device, device group, or check level, and seamlessly deploy remediations to non-compliant endpoints directly from the Security Checks grid
- Patch : The Patch Overview dashboard centralizes missing patches and vulnerable devices across your environment by risk level, offering quick drill-downs into Fixlets, Devices, and Deployments.
Administration and security, built in!
- Role-based access control: Granular permissions let you scope what each role can do by function.
- Single sign-on and multi-factor authentication: OIDC single sign-on and multi-factor authentication are available .
- Security posture: BigFix UI supports NIST 800-53 controls and FIPS 140-3 compliant encryption.
- Accessibility: The whole UI has been tested against WCAG 2.2 Level AA.
- Personalization and languages: Customize the homepage with links to your favorite apps and reports, switch between light and dark mode, and use the interface in English, Japanese, or French.
Built on the platform you already run!
- Requirements: BigFix UI requires BigFix Platform 11.0.7 and BES Explorer. It also requires Microsoft SQL Server 2025 and a Windows Server computer to install on.
- Built to scale: The UI supports up to 300,000 endpoints, with up to 36 concurrent users. BigFix UI uses in-memory data caching through BES Explorer, so pages load quickly and stay responsive.
Known limitations
BigFix UI is a first release, and not yet a full replacement for any of the existing UIs.
Please review these limitations before you plan your migration:
- Device correlation for MultiCloud and Mobile/Modern Client Management is not currently supported. The UI will not install or start if correlation is detected.
- HADR and DSA are not supported for BigFix UI at this time.
- Baselines are not available. Some of their functionality is covered by Fixlet Streams.
- Parameterized Fixlet support is limited â see here.
- Scripted reports created in Web Reports are not guaranteed to work in BigFix UI.
- Fixlet Streams capabilities are not yet ready for full Patch Policies replacement.
- IVR in BigFix UI covers Tenable VM only. Tenable SC, Qualys, Rapid7, and CrowdStrike are only available in the existing WebUI. IVR installation still happens through the Console.
- Software Distribution does not yet support exporting packages, uploading folders or URL definitions. Packages created in the legacy Console or WebUI are not visible in BigFix UI. To reuse them, export them from the legacy interface and import them into BigFix UI.
- BigFix UI does not support connecting to multiple BigFix root servers.
Looking ahead
BigFix UI will keep growing through ongoing releases, bringing more BigFix capabilities into a unified experience. We will share more details as they become available.
Additional information about this release
- BigFix UI requires BigFix Platform 11.0.7. For details on that release, see the BigFix Platform 11.0.7 Release Announcement.
- BigFix UI documentation:
- For more information on performance and capacity planning, see BigFix Performance & Capacity Planning Resources.
- BigFix UI installer can be downloaded from My HCL Software (use your HCL ID to authenticate), under Downloads/HCL BigFix/BigFix UI/1.0/October 2026
- See also the âFrequently Asked Questionsâ section in the comments below
This is an exciting step towards the future of BigFix!
The BigFix UI product team