|Industry||Enterprise IT, IT management, security configuration management
PC lifecycle management, networked computing device management, IT compliance reporting
|Headquarters||Emeryville, CA, United States|
|Dave Robbins President and CEO
C. Alex Estevez CFO
Amrit Williams CTO
Allan Peters SVP of Worldwide Sales
Philippe Vincent SVP Strategy and Corporate Development
Gregory Toto SVP Product Development
|Products||BigFix service delivery platform, BigFix on-demand Solution Packs and modules for security threat suppression (BigFix Endpoint Protection), security configuration management (BigFix Security Configuration and Vulnerability Management), and systems management (BigFix Systems Lifecycle Management).|
BigFix, Inc., was an American company focusing on reducing the cost and complexity of managing networked desktop, mobile, and server computers. From its origins as a PC self-help application, the company’s products expanded to enable delivery of a wide variety of on-demand endpoint management services that include asset inventory/discovery, security vulnerability detection and remediation, software distribution, IT compliance reporting, patch management, software license management, security policy enforcement, and endpoint device power consumption management. Founded in 1997, BigFix is headquartered in Emeryville, California.
On July 1, 2010, IBM announced a deal to acquire BigFix for an undisclosed amount. According to Bloomberg, IBM paid approximately $400 million in the deal, which closed on July 20, 2010. Since 2013, BigFix has been known as IBM Endpoint Manager.
BigFix, Inc., was founded in 1997 in Emeryville, California. The company’s initial product was a user self-service system management application that was marketed to OEM PC manufacturers.
In 2002, the company developed BigFix software into a vehicle for enterprise-scale networked desktop, mobile and server computer management. This decisively shifted the focus of the company from consumer to enterprise markets. Initial uses of what became the BigFix platform centered on security patch management, which was identified as a significant pain point at that time for enterprise IT departments.
In 2007, BigFix expanded its scope to address specific IT infrastructure management solution areas: security threat suppression (BigFix Endpoint Protection), enterprise security configuration management (BigFix Security Configuration and Vulnerability Management) and enterprise systems management (BigFix Systems Lifecycle Management).
In 2009, BigFix entered an exclusive partnership with Trend Micro to deliver the Web Protection Module to protect endpoints against web threats and the Core Protection Module which incorporates Trend Micro's OfficeScan AV security component into the BigFix management architecture.
The company now has more than 900 customers, and BigFix products have been licensed to manage more than 9 million computing devices. Key markets for BigFix include: banking, financial services, manufacturing, government, education, and healthcare. Representative customers include: Entergy, Pitney Bowes, Stanford University, SunTrust Banks, Miami-Dade County Public Schools, and the US Department of Energy.
On July 20, 2010, IBM acquired BigFix, Inc. for an undisclosed sum, and integrated the BigFix product into its Tivoli Software portfolio under the new name IBM Tivoli Endpoint Manager. Since 2013, BigFix has been known as IBM Endpoint Manager (IEM).
BigFix awards and reviews
- Deloitte’s Silicon Valley Technology Fast 50 in 2007 and 2008
- CIO 100 2008 award on behalf of Miami-Dade County Public Schools
- InfoWorld 100 2008 on behalf of Miami-Dade County Public Schools
- Computerworld Green IT Best Practices 2008 Award on behalf of Miami-Dade County Public Schools; ROI category
- “Best Buy” in SC magazine’s NAC group test
- “Best Buy” in SC magazine’s endpoint security group test
- “Recommended” in SC magazine’s policy management group test
- Network Computing patch management rolling review
BigFix technology architecture
Key components of the BigFix service delivery platform include the BigFix Agent, BigFix Server and Console, BigFix Fixlet messages and BigFix Relays. The BigFix Platform creates a lightweight communications and management infrastructure for delivery of security and system management services to networked desktop, laptop/notebook and server computers. By assigning responsibility for reporting and management actions on endpoints themselves, the BigFix Platform enables visibility and management of IT infrastructures ranging from hundreds to hundreds of thousands of desktop, mobile and server computers.
The BigFix Agent resides on managed devices and acts as a universal policy engine capable of delivering multiple management services. A single BigFix Agent can execute a diverse and extensible array of management services that range from real-time client status reporting, to patch and software distribution, to security policy enforcement.
The BigFix Agent also automatically notifies the BigFix Server and Console of changes in managed device configuration, providing a real-time view of device status. In addition to a standard array of management services available from BigFix, Inc., customers and developers can create custom policies and services using a published BigFix authoring language. The BigFix Agent runs on all versions of the Microsoft Windows operating system since Windows 95, Unix, Linux and Mac OS client systems. This enables administrators to consolidate management of heterogeneous infrastructures from the BigFix Console.
The BigFix Server is a software-based package that provides a control center and repository for managed system configuration data, software updates and patches, and other management information. The BigFix Console, which runs from the BigFix Server, provides an operations control center for BigFix administrators that includes graphical displays of device, group, and enterprise-wide device status and dashboards for executing management actions through the BigFix infrastructure. The console also includes reporting functions and templates that enable graphical and tabular views on infrastructure status.
BigFix Fixlet messages are instructions to the BigFix Agent to perform a management or reporting action. Fixlet messages can be programmed to target specific groups of devices to perform management actions. As noted above, users have the option of writing custom Fixlet messages in addition to those supplied by BigFix as standard product offerings.
BigFix Relays act as concentration points for Fixlet messages on network infrastructures. Relays are a software module that execute as a shared service on non-dedicated hardware. Relays help reduce network bandwidth requirements for distribution of BigFix Fixlets and content such as software, patches, updates, and other information. Relays also offer a fail-over mechanism to keep BigFix-managed clients in touch with the BigFix console should “normal” communications channels go dark or become overloaded with other traffic.
The largest BigFix production installation consists of 550,000+ endpoints, and the product has been successfully deployed in environments ranging from 100s to 100,000s of managed devices. BigFix solutions also require very little in the way of dedicated management infrastructure, with one physical server required to manage up to 100,000+ endpoints.
BigFix products and services
BigFix products consist of the BigFix service delivery platform and various bundled combinations of on-demand BigFix Policy Modules and Extensions delivered as BigFix Solution Packs.
BigFix Solution Packs target specific solution areas — security threat suppression (BigFix Endpoint Protection), security configuration management (BigFix Security Configuration and Vulnerability Management) and systems management (BigFix Systems Lifecycle Management).
BigFix Policy Modules and Extensions enable specific security and system management services for delivery via the BigFix Platform. Solution Packs integrate collections of thematically-linked Policy Content modules, but customers can also license individual modules to add capabilities to a BigFix Solution Pack, or create completely customer-specific solutions.
BigFix services include training with courses on BigFix operations and the BigFix custom Fixlet authoring language. The company also offers installation, implementation, custom Fixlet message content authoring services as well as ongoing user support.
- Relevance Language
- Systems management
- System administration
- Configuration management
- Information security management
- Software license agreement
- Power management
- List of systems management systems
- Denver Business Journal, November 12, 2008
- "IBM to Acquire BigFix to Advance Smarter Data Centers". ibm.com. July 1, 2010.
- Hoffmann, Katie. "IBM to Buy BigFix for About $400 Million to Add Security Software Products". Bloomberg. Retrieved 19 March 2014.
- "BigFix, Inc. Launches BigFix Enterprise Suite Proactive Technology That Eliminates Security Vulnerabilities Across the Enterprise Network" (PDF) (Press release). BigFix, Inc. February 11, 2002.
- "Trend Micro and BigFix Bring Highly Scalable, Integrated Endpoint Protection and Management to Very Large Enterprises" (Press release). Trend Micro, Inc. January 6, 2009.
- "IBM Closes Acquisition of BigFix". ibm.com. July 20, 2010.
- "2008 Silicon Valley Deloitte Technology Fast 50 Awards". Retrieved 16 December 2008.
- California Lawyer, McNichol, Tom October, 2008
- Web Buyers Guide