SWD & SSA Updates 2018

Transcription

1 SWD & SSA Updates 2018 Stephen Hull STSM, BigFix Development 04/09/2018

2 Latest SWD & SSA features

3 What s shiny and new? SWD Support multiple tasks for a software pkg Install, Update, Uninstall, etc Export/Import software pkgs via WebUI Editing custom tasks in WebUI SSA UI Updates! SSA configuration/deployment workflow in WebUI Branding options Name (e.g. BigFix Self-Service Application --> TechCorp App Store) Icon (changes shortcut, systray, and dock/menu bar) Color (title bar and app view header color) Help text (link to help page in SSA footer) Dashboard support SSA will now display ClientUI Dashboards SSA config page adds option to upload/deploy dashboards 3 IBM Security

4 Multiple task support 4 IBM Security

5 Export/Import support 5 IBM Security

6 Let s create some Software! 1. Create a software pkg (include icon, description, category, etc) Advanced Sample pkgs on \\ \files\Materials\Day 3\Lab 2. Install command 2b. Add uninstall task w/ valid relevance & actionscript 3. After saving, edit deployment task to add/modify relevance/actionscript/etc 4. Repeat 1-3 for some additional pkgs 3b. Add pre-requisite check within actionscript to alert user and skip install when not satisfied (but still complete) Configure one pkg to Fail when installing 6 IBM Security

7 UI Updates 7 IBM Security

8 Rebranding 8 IBM Security

9 Client Dashboard support 9 IBM Security

10 Let s deploy it! 1. Create an SSA configuration task (include customized branding) Sample icons at \\ \files\Materials\Day 3\Lab 2. Deploy it! 3. What has to happen before SSA appears? 10 IBM Security

11 Let s put it together! 1. Deploy some software to the SSA Advanced 1b. Deploy install & uninstall tasks, make sure they can run multiple times 2. Try them out in the SSA 2b. Verify pre-requisite check action works and can be retried 3. How was your experience? What did you notice? Can I use the console? 11 IBM Security

12 Under the hood SSA replaces UI duties of ClientUI, but not the interaction with the Client ClientUI is a passthrough for message exchange between the Client and SSA Client uses ~25% CPU when SSA is open (UI is visible) _BESClient_Resource_WorkUI (default 20) _BESClient_Resource_SleepUI (default 60) Has its own configuration file (ssa.config) and logs (YYYYMMDD.log) Windows C:\Program Files (x86)\bigfix Enterprise\BigFix Self-Service Application\resources %LOCALAPPDATA%\BigFix\BigFixSSA\logs Mac /Library/Application Support/BigFix/BigFixSSA $HOME/BigFix/BigFixSSA/logs 12 IBM Security

13 Under the hood (cont d) MIME Fields Metadata that ties a fixlet to a SW package <MIMEField> <Name>x-fixlet-swd-wizard-data</Name> <Value>{"lastmodified":"Fri Apr :56:39 GMT-0700", "product":"notepad++","version":"7.3.3","vendor":"open Source","owner":"Steve@trojanhulls.com","pkgvariable":"", "size":"","description":"notepad++ is a free (as in \"free speech\" and also as in \"free beer\") source code editor and Notepad replacement that supports several languages. It runs on MS Windows.\n\nSee for more information","creator":"steve@trojanhulls.com", "files":[{"id":"0a55e43108b289e6d9aff14d5ed0204e5eca6468_ ","size": , "dateadded":"fri, Apr :41: ","compressed_data_for_package":false, "folderoffset":"", "sha256":"c59a2b8ba98d0bb849e55aa8ad1cfc9af54ed9acc1a087a43033e23bebedc0e8", "filename":"npp installer.exe","sha1":"0a55e43108b289e6d9aff14d5ed0204e5eca6468", "exe_metadata":{"exe_metadata_version":" ","companyname":"","fileversion":"","productversion":"","productname ":""},"ReferenceID":"1702","ReferenceName":"/0a55e43108b289e6d9aff14d5ed0204e5eca6468/npp Installer.exe","fil e_url":""}],"pkgvariablekey":"swd_package_webui_steve@trojanhulls.com_ ","os":["windows"], "fullinstallcommand":"/s","runassystem":true,"site":{"name":"master Action Site (Default)","ID": ,"Type":1, "$$hashkey":"object:89"},"categories":["utilities"],"usecommandline":false}</value> </MIMEField> 13 IBM Security

14 Under the hood (cont d) Metadata that enables content for SSA Version, size and icon are stored in action-ui-metadata MIME field BigFix server/agent forward and process this MIME field Icon is base64-encoded ( or <MIMEField> <Name>action-ui-metadata</Name> <Value>{"version":"7.3.3","size": ,"icon":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADYAA AAwCAYAAABaHInAAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mA AAF3CculE8AAAACXBIWXMAAAsTAAALEwEAmpwYAAABymlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPHg6eG1wb WV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNS40LjAiPgogICA8cmRmOlJERiB4b WxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc 2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAgICAgICAgICB4bWxuczp0aWZmPSJodHRwOi8vbnMuYWRvYmUuY29tL3Rp ZmYvMS4wLyIKICAgICAgICAgICAgeG1sbnM6eG fjumdtln+yevc7nue9ofume/9cnxcljnynbbtgqk5ikzx7omzhxa SpWhJhbO9UKtQKTqVSmTrPm046j7E/XYQLe3sFvp2I2Mv6y1akuV4K9cF8nc6qVCwpfhA1MA/6ftUnnjvzZxrxCxOB+ymh r3ll/4vlveplyaqjiguofwueip+guepjfo4b/wumpdxe33j9xwaaaabjru5erkjggg=="}</value> </MIMEField> 14 IBM Security

15 Future SSA enhancements

16 Coming Enhancements Minor UI Updates Installed/Uninstall Application workflow Installed apps remain in SSA Uninstall option becomes available, if offer is deployed Pre-requisite checking support Ability to fail and retry offers due to pre-req failures within actionscript User-driven retry on failure Messaging support All ClientUI messages handled by SSA Required updates support Actions with deadlines 16 IBM Security

17 Catalog View - IBM Essential Apps 17 IBM Security

18 Catalog View All Apps with Required Updates 18 IBM Security

19 Catalog View In progress Filter 19 IBM Security

20 App View Updated 20 IBM Security

21 History View Updated 21 IBM Security

22 THANK YOU FOLLOW US ON: ibm.com/security securityintelligence.com youtube/user/ibmsecuritysolutions Copyright IBM Corporation All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. Any statement of direction represents IBM's current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others. Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM does not warrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.