Noob questions.
Can BigFix work in a one-way airgap situation? IE stuff goes in but never goes out.
Also, does it replace WSUS or supplement it? Where do third party fixes come from, where are they stored?
Scenario would be (air-gapped) 3 windows servers, 2 linux servers and a dozen windows 10 PCs.
By ‘airgap’, do you mean that your Bigfix Server cannot reach the Internet? That works, and works well.
Do you mean that the clients cannot reach the Bigfix Server? You can put Relays in to shape the traffic flow, but you do need network traffic between the clients and the server (or relays). It can be one-direction in that the clients initiate the connection, but they will both download content/patches, and post results to the server.
Bigfix can fully replace WSUS, SCCM, MDT, Satellite Server, and many others.
Microsoft an third-party fixes are downloaded by the Bigfix Server and cached there, and provided to the clients. The few exceptions are third-party that require some kind of paywall or their license requires you to download the files and store them on the server manually (ie Oracle Java).
What do you exactly mean by “IE stuff goes in but never goes out?”