BigFix

BigFix provides remote control, patch management, software distribution, operating system deployment, network access protection and hardware and software inventory functionality.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
  
  

Parameters

1. BigFix Domain (optional) - The hostname or IP address of the BigFix server that Axonius can communicate with via the Required Ports.

   Note:

   When BigFix SOAP Domain is not configured, BigFix Domain is required.

2. BigFix SOAP Domain (to use instead of REST) (optional) - The domain for the SOAP WebReports server. For information on how to correctly configure the SOAP WSDL, see APIs.

   Note:

   • When BigFix Domain is not configured, BigFix SOAP Domain is required.
   • When both domains are configured, BigFix SOAP Domain is used.

3. Port (optional) - Enter the port.

4. User Name and Password (required) - The credentials for a user account that has the Required Permissions to fetch assets.

5. Advanced Settings (optional) - Use to run a query by Relevance expression instead of the regular flow.
   To run by a Relevance expression in Advanced Settings

   1. Create a JSON file containing the parameters relevance (string), fields (list of fields) and mode. mode must have the constant value custom_relevance.

      For example:

    {
     "mode": "custom_relevance",
    "relevance": "ids of bes computers",
     "fields": ["id"]
    }
   

   b. Upload the JSON file by clicking Choose file.

6. Verify SSL - Select whether to verify the SSL certificate offered by the value supplied in BigFix Domain. For more details, see SSL Trust & CA Settings.

7. HTTPS Proxy (optional) - A proxy to use when connecting to the value supplied in BigFix Domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Exclude IPv6 addresses - Select whether to fetch IPv6 addresses.
   • If selected, all connections for this adapter will fetch only IPv4 addresses.
   • If cleared, all connections for this adapter will fetch both IPv4 and IPv6 addresses.
2. Fetch CVEs - Fetch CVE vulnerability information for computers.
3. BigFix fields include list (optional) - Specify a comma-separated list of fields to fetch from BigFix in addition to a basic set of data fetched for each device (such as IP, MAC address, OS information, serial number). The supplied field format should be as defined by BigFix. Otherwise, only basic data is fetched for each device.
4. Fetch CPU details (optional) - Select whether to include CPU details in the fetch.
5. Only fetch devices that have been changed in the last X days - Enter a number of days to filter the devices that are fetched based on the devices that were changed.
6. Fetch installed applications - Select this option to enrich devices with data for installed applications.
7. Fetch installed and missing patches - Select this option to enrich devices with installed and missing patches information.
8. BigFix fields to parse as tags - Enter an optional list of comma-separated field names to additionally parse as adapter tags.
9. Fetch analyses - Select this option to fetch BigFix analyses results.
10. Analysis and Site names - Click the arrows and enter Analysis name and Site names to filter the analysis results. When you use 'Fetch analyses' you have to enter at least one Analysis and Site name. Click the plus sign to add more.

APIs

When connecting to the BigFix SOAP Domain, the SOAP WSDL needs to be correctly configured on the WebReports server. In order for the connection to work, the WSDL file needs to be in the correct location on the server. For more information, see Configuring SOAP.

Required Ports

Axonius must be able to communicate with the value supplied in BigFix Domain via the following ports:

• 52311 (default port)

For details, see BigFix Server Requirements.