Need Help Identifying Remaining Vulnerabilities in BigFix IVR

Hello BigFixers,

I recently imported a list of 20,000 vulnerabilities into our BigFix IVR (Vulnerability Response) tool to assess our system’s security posture. However, after running scans, only 9,000 vulnerabilities have been identified through the IVR.

This leaves me with approximately 13,000 vulnerabilities that have not been correlated or identified by the IVR. I’m seeking advice and suggestions on how to efficiently identify and address these remaining vulnerabilities.

Here are some details about our setup:

*** We’ve imported the vulnerabilities into the IVR using a CSV file.**
*** Our scanning process has successfully identified 9,000 vulnerabilities within the IVR.**
*** We need assistance in identifying and correlating the remaining 13,000 vulnerabilities.**

Any guidance on how to approach this situation would be greatly appreciated. Are there any additional steps or tools we could use to identify these remaining vulnerabilities within the IVR?

Thank you in advance for your help!

Spot-check some vulnerabilities…are they for systems that don’t support BigFix, or don’t have a BigFix Agent installed? Routers, switches, firewalls,.etc.

1 Like