HCL BigFix - DNUG Stammtisch Salzburg

HCL BigFix - DNUG Stammtisch Salzburg

• 1.
  Copyright © 2023HCL Software Limited HCL BigFix The Endpoint Management Platform
• 2.
  2 Endpoint Security isa Universal Challenge In 2023, there are about 3.5 million unfulfilled cybersecurity jobs Skills shortage Regulatory fines can cost millions for large global brands Compliance mandates Nearly 1/3 of all detected vulnerabilities remain unremediated after a year Long remediation times A typical organization uses 14 endpoint management tools Too many tools And agents No consolidated single manage- ment view of all endpoints increases security risk Lack of visibility Endpoint Security is essential, but challenging “things” to secure personal data records stolen lost to cybercrime
• 3.
  3 Top Reasons CustomersBuy BigFix Consolidate tools for reduced cost, complexity and risk Accelerate Zero Trust and other security initiatives Keep all endpoints continuously patched and compliant Remediate vulnerabilities faster to maintain business continuity Reduce annual software costs while fostering use of current, most secure, software versions Securely Manage “Work From Anywhere” Initiatives Industry’s Broadest Array of Automation and Out-Of-The Box Content
• 4.
  4 The Economic Impactof BigFix Addressing endpoint management challenges drives tangible value No consolidated single Management view of all endpoints increases security risk Lack of visibility In 2023, there are about 3.5 million unfulfilled cybersecurity jobs Skills shortage Regulatory fines can cost millions for large global brands Compliance mandates Nearly 1/3 of all detected vulnerabilities remain unremediated after a year Long remediation times A typical organization uses 14 endpoint management tools Too many tools And agents Endpoint Management Challenges BigFix delivers Economic Impact One skillset leveraged across all OS platforms and device types Simplified staffing, fewer specialists Reduced staffing costs Eliminates configuration drift, remediation effort, and noncompliance fines Continuous compliance enforcement Fewer fines for noncompliance Prioritize and speed vulnerability remediation across the fleet of endpoints Fast remediation of vulnerabilities Reduce security risk A single endpoint management solution reduces tool sprawl and IT complexity Single agent and platform Reduced IT spend A unified view simplifies management and control and reduces risk Consolidated view of all endpoints Improve visibility and control
• 5.
  Internet/Firewall Connected Corporate/Remote Offices/ ATM/PoS/Desktopsetc. Real-time visibility, scalability, and ease of use Lightweight infrastructure • Use existing systems as relays • Built-in redundancy • Support / secure roaming endpoints • Single Port (52311) • API Servers for extension to Cloud and Mobile Cloud-based content delivery • Highly extensible • Automatic, on-demand functionality • 500K+ Published Fixlets. • New content added daily + community. (BigFix.me) • To BigFix Server Only! Single server and console • Highly secure and scalable • Aggregates data, analyzes and reports • Pushes out pre-defined / custom policies • Can be on WAN or Cloud Flexible policy language (Fixlets) • Thousands of out-of-the-box policies • Best practices for operations and security • Simple custom policy authoring • Highly extensible/applicable across all platforms • Use Relevance, PowerShell and others Intelligent agent • Performs multiple functions • Continuous self-assessment and policy enforcement • Minimal system impact (< 2% CPU) • Approximately 15MB Ram • API Registration Content Repository BigFix Server Relay WAN Connected Relay Open Architecture • Rest API • ServiceNow • Qualys • Tenable • Carbon Black • Ansible • Rapid7 • Splunk, etc. MCM API MCM/API Server(s) Remote Users Laptops / Mobile
• 6.
  New Challenge of2023: Blocking Threats Before the Attack 6 60% of breaches occur because a patch was available for known vulnerability but not applied 60days for an organization to remediate critical vulnerabilities <15days for attackers to exploit a discovered vulnerability IT Ops needs to get ahead of the latest threats Align IT with security Automate Vulnerability Remediation
• 7.
  7 Endpoint Management forEvery Part of Your Organization Support for 100 operating systems and variants Integrations with ServiceNow, Tenable, Qualys, Nutanix, IBM, VMWare, AWS, Google Cloud, Azure and others User Workspace Management Deep automation for clients and mobile to easily solve the latest user endpoint demands in the market Secure Infrastructure Automation Intelligent automation of servers and cloud assets Security & risk management compliance Software Asset Management Software cost management License optimization Software auditing CyberFOCUS Security Management Help alignment of security and operations Help C-suite balance security and business Prove cyber risk reduction
• 8.
  8 Support for 100operating systems and variants Integrations with ServiceNow, Tenable, Qualys, Nutanix, IBM, VMWare, AWS, Google Cloud, Azure and others Secure Infrastructure Automation Intelligent automation of servers and cloud assets Security & risk management compliance Software Asset Management Software cost management License optimization Software auditing CyberFOCUS Security Management Help alignment of security and operations Help C-suite balance security and business Prove cyber risk reduction Improve management and control of end user computing devices including laptops, desktops, phones and tablets while enabling self-service IT. Provides • Total User Workspace Management • User self-service • User experience management • CyberFOCUS Analytics • Fast Vulnerability remediation • Enforced compliance • Remote desktop control BigFix Lifecycle BigFix Compliance BigFix Mobile Endpoint Management for Every Part of Your Organization
• 9.
  9 Support for 100operating systems and variants Integrations with ServiceNow, Tenable, Qualys, Nutanix, IBM, VMWare, AWS, Google Cloud, Azure and others User Workspace Management Deep automation for clients and mobile to easily solve the latest user endpoint demands in the market Software Asset Management Software cost management License optimization Software auditing CyberFOCUS Security Management Help alignment of security and operations Help C-suite balance security and business Prove cyber risk reduction Endpoint Management for Every Part of Your Organization Provides • Effective patch management • Intelligent server automation • OS updates and deployment • CyberFOCUS Analytics • Continuous compliance • Remote control • Ready-to-deploy content BigFix Lifecycle BigFix Compliance Improves security and control of on- prem and cloud servers running Windows, UNIX and Linux using a single comprehensive management platform.
• 10.
  Endpoint Management forEvery Part of Your Organization 10 Support for 100 operating systems and variants Integrations with ServiceNow, Tenable, Qualys, Nutanix, IBM, VMWare, AWS, Google Cloud, Azure and others User Workspace Management Deep automation for clients and mobile to easily solve the latest user endpoint demands in the market Secure Infrastructure Automation Intelligent automation of servers and cloud assets Security & risk management compliance CyberFOCUS Security Management Help alignment of security and operations Help C-suite balance security and business Prove cyber risk reduction Optimizing software cost management through inventorying licenses, tracking usage and delivering audit-ready reports. Provides • Software catalog with 100,000+ titles • Software usage reporting • Identification of over deployed titles • Identification and optional removal of risky and unauthorized software BigFix Inventory
• 11.
  Endpoint Management forEvery Part of Your Organization 11 Support for 100 operating systems and variants Integrations with ServiceNow, Tenable, Qualys, Nutanix, IBM, VMWare, AWS, Google Cloud, Azure and others User Workspace Management Deep automation for clients and mobile to easily solve the latest user endpoint demands in the market Secure Infrastructure Automation Intelligent automation of servers and cloud assets Security & risk management compliance Software Asset Management Software cost management License optimization Software auditing CyberFOCUS Security Management Help alignment of security and operations Help C-suite balance security and business Prove cyber risk reduction Aligns of security and operations to remediate vulnerabilities faster, ensure compliance across the enterprise and better manage security and risk across all endpoints in the enterprise. Provides • Insights for Vuln Remediation • CISA KEV Analyzer • MITRE APTs Vuln Simulator • Protection Level Agreements BigFix Lifecycle BigFix Compliance BigFix Remediate BigFix Resolve
• 12.
  12 BigFix CyberFOCUS Technology Theindustry’s first vulnerability remediation solution that combines threat intelligence-based CVE prioritization, prescriptive analytics and the broadest device coverage to help organizations stay protected ahead of emerging threats.
• 13.
  13 Typical Vulnerability Remediationusing current tools Vulnerability Remediation using BigFix Current • IT is at the end of the process • Research and Fixes are manual tasks taking weeks • Management activities organized by OS • Remediations are prioritized manually • WEEKS / MONTHS BigFix • Automates correlation and research • Automates Fixlet creation • Activities are OS-independent • Speeds patching and vulnerability remediation • Allows IT Ops to stay ahead of the threat • HOURS / DAYS
• 14.
  14 BigFix Insights forVulnerability Remediation
• 15.
  15 BigFix Compliance Enables organizationsto achieve continuous compliance of security and regulatory policies effectively Continuous assessment Continuously assesses each endpoint’s security configurations to get real-time compliance status Modern Client Management Extends visibility and control to Windows 10 and macOS endpoints using a modern approach Insights for Vulnerability Remediation Correlates vulnerabilities discovered by 3rd party tools with BigFix remediation content to bridge the Sec/Ops gap Endpoint Protection Management Monitors deployment health of various endpoint protection tools and remediates deployment issues quickly Rich Policy Contents 20,000+ Out-of-the-box checks for 60+ operating systems and middleware applications based on CIS, DISA STIG and PCI Automatic Remediation Automatically remediates configuration drifts to re-enforce policy and reduce attack surface Comprehensive Analytics & Reporting Assesses and reports on current status and historical trend of security configuration, patch and vulnerability postures Add Shadow
• 16.
  16 Insights for VulnerabilityRemediation Correlates vulnerabilities discovered by 3rd party tools with BigFix remediation content to bridge the Sec/Ops gap Modern Client Management Extends visibility and control to Windows 10 and macOS endpoints using a modern approach Provision • OS provisioning • Bare metal & OS re-imaging • Complex application deployment Service • Secure remote control • From any endpoint to any endpoint (over the internet) • BigFix in-place upgrade (windows upgrade) Manage • Software distribution • Patch management • Configuration and Patch • Power Management • End user self-service application • Task sequencing and automation e.g. clustered server patching Analyze An open data analytics platform providing insights, historical and trend reports Secure • Continuous configuration compliance • Secure computer disposal (disk overwrite NIST) BigFix Lifecycle Enables organizations to discover, manage and support devices of all types Add Shadow
• 17.
  17 Identify unused software Usagereports to identify systems where software can be removed to reduce security exposures Identify unmanaged software Inventory data and newly discovered system reports to verify if assets are properly managed or unauthorized. Identify unmanaged software Whitelist/Backlist filtering of inventory data to identify systems where unauthorized software is deployed or unauthorized processes are running Reduce overspending Detailed, real-time, current inventory and usage reports to eliminate under used or unnecessary licenses and reduce maintenance costs Reduce audit risk and cost • Identify unlicensed computers. • Associate software inventory with hardware data to avoid software license exposures Reduce true-up costs Accurate inventory data in support of purchasing and procurement tools and processes BigFix Inventory Maintain software audit readiness and mitigate security risks with software compliance and usage management Add Shadow
• 18.
  BigFix Remediate Extends thepower of BigFix Patch with the industry’s fastest vulnerability remediation to align security and IT operations and shrink the enterprise attack surface Multiplatform patch Patch nearly 100 different operating systems and variants with one platform Insights for Vulnerability Remediation Correlates vulnerabilities from Tenable and Qualys to bridge the Sec/Ops gap and reduce attack surface CyberFOCUS analytics • Advanced Persistent Threat (APT) Mapping and a Vulnerability Remediation Simulator • CISA Known Exploited Vulnerability Exposure Analyzer • Protection Level Agreements Fixlet library More than 500,000 Fixlets are available on bigfix.com with more being added daily. Extended patch content Ready-to-deploy patch content for popular 3rd party application developed and tested by HCL BigFix Add Shadow
• 19.
  BigFix Mobile Modern Managementfor a Mobile Workforce Enroll Enroll corporate or BYOD devices with Zero touch or end user initiated Over- the-air enrollment. Manage • Easily manage several hundred OS configuration settings and applications • Easily deploy Applications from Google Playstore and Apple Appstore Service Remotely wipe, or lock a lost or stolen device to protect corporate data, and provide an on-screen message so that it can be retrieved Secure Set passcode policies, restrictions policies, OS update policies or manage application blacklist and whitelisting, camera and print settings, etc. Retire Easily decommission corporate applications and data on personal devices that are no longer authorized
• 20.
  20 A Recognized Leader GartnerPeer Insights for UEM Quadrant Knowledge Systems
• 21.
  BigFix Technology AllianceProgram Certified integrations support by HCL and the partner
• 22.
  22 Top Reasons PartnersEngage BigFix Increased Productivity = Increased Profitability On Demand Technical Enablement and Sales Support Thought Leadership to Align IT and Security New, Profitable Implementation, XaaS and MSP Services Management Consulting for Protection Level Agreements Scales to all size customers and industries