There is an Advanced Server setting that allows you to disable that “automatic push” of the catalog file when it is uploaded to the BFI server (Download Software Catalog Automatically).
We disable that and then if you go to Management Tab > Catalog Upload, Question Mark ICon int he middle of the page, it allows you to manually download the Catalog Download Fixlet, which you can import into the BigFix Console and manually deploy.
Our use case is probably like yours. We want to control scanning so we deploy a Multiple Action Group on demand:
- Install Scanner
- Install Catalog
- Run Capacity San
- Initiate Software Scan
Policy action always running to Upload Scan results.