How to check Bigfix Client and Relay communication using SSL

i have enabled enhanced security but unable to figure out if client / Relay are on securre connection. I still see in the client the logs that download method is on http://relay server?

  • How we can prove that all communication is secure? Is there anything we can prove with client logs or something else?
  • What encryption methods are currently used,
  • how secure is the communication between BES Clients and BES Relays (and Relay to Relay / Root as well),
  • how is the BES Client/BES Relay initial handshake handled?

I need to tell my security architect exactly how BigFix secures all of its communication, and how each endpoint trusts the infrastructure (and vice versa).

Iā€™d suggest having a look at the following, and/or perhaps pointing your security architect to it as well to help answer at least some of these questions:

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Security%20Overview

1 Like