BigFix 2018 Roadmap. Aram Eblighatian. Product Manager IBM BigFix. 14 May, 2018

Transcription

1 BigFix 2018 Roadmap Aram Eblighatian Product Manager IBM BigFix 14 May, 2018

2 What's New in BigFix?

3 BigFix Platform BigFix Platform v9.5.7 Released Oct Gathering Performance improvements (WebUI and more) Relay Reliability improvements Enhanced Client Deploy Tool - allows for simple "Right-Click & Deploy" of the BES Agent from unmanaged assets to any endpoint regardless of OS Enhanced agent registration to reduce / eliminate duplicated computers Ability to elevate privileges for 'Run as user' command execution Ability to specify a timeout value for the "wait" actionscript command Actionscript extensions to allow reading the contents of Locked Files Improved Session Relevance to allow accessing the Action Start Time, End Time and Exit Code for improved reporting and troubleshooting Enable SSA to display ClientUI dashboards / messaging Enable UEM capabilities : Client Compliance executables should output response in XML format, Over-the-air Enrollment Support for SMTP Authentication for notifications in Web Reports Added support for deploying BigFix Agent / Relay on RHEL and Linux CentOS versions 6 and 7 with SELinux enabled Added support for BigFix Agent on Debian 9, Mac High Sierra (addressed limitation from initial support), Win10 Creators Fall Update 3 IBM Security

4 BigFix Platform/Lifecycle Maintenance Releases v9.5.6 / v / v / v Resigning of Mac Clients with new certificates Console Qualification for Windows 10 Creators Update Security enhancements, APAR and defect fixes BigFix Lifecycle Optimized and improved OS image management Migration of Windows 7 to Win10 Support for Windows 10 Fall Update (v1709) Ubuntu installation (phase 1 - Cloning only) Windows Currency New Win 10 build and new WAIK tool Server Automation: Middleware patch WAS updates Self Service App: Customize-able Icons, and Branding, App Store App Deployment Profile Management for Win10 and Mac OS Updated OSD support for multiple OS es (Win, RHEL, SLES, and ESXi hypervisor) 4 IBM Security

5 BigFix Platform BigFix Platform v9.5.9 Released April 2018 Added signature to the Red Hat installation packages Ability for endpoints to constrain the download action if the client is not connected to the designated (preferred) relay Ability for Web Reports to restrict access to some properties Improved Relay scalability by supporting 5000 endpoints per Relay Blog Post/PDF on Scalability: Other Enhancements Added support for IBM BigFix Agent and Relay on AIX 7.2 on Power 9 APAR and defect fixes Security enhancements 5 IBM Security

6 BigFix WebUI WebUI Improve WebUI scalability and update performance by eliminating dependency on data extraction (ETL) based tasks This allows you to view real-time data for the majority of workflows and views, and nearly real-time data for the Overview and Executive Dashboards Additional targeting options in Query such as target by device or group Improved user experience Content creators can now edit certain custom content within WebUI Edit and delete custom Tasks Add icons to custom Tasks Component Refactoring Security enhancements Self Service Application Personalization/Rebranding Updated UI for enhanced usability including an improved catalog view with large icon-based tiles Software Distribution Support creating and editing packages with multiple Fixlets Support creating uninstall Fixlets in packages Support exporting and importing packages Support for more file types (.bat,.appv,.appx, Solaris PKG) Enhanced scheduling of software deployments Option to cache URL-based files during Task runtime 6 IBM Security

7 BigFix Patch Patch: Patch Policies (aka AutoPatch ) WebUI Application Simplifies and automates the patching process through Patch Policies Rollback of security and monthly rollup packages from Microsoft Transform download plugin for RHEL 7z, RHEL 6z, CentOS, Suse 11z, for additional content access Extended/New coverage VMWare ESXi 6 and 6.5 Audit Fixlets AIX: OpenSSH & OpenSSL SLES 12 on Z RHEL 7 content for Linux on Power LE RHEL 7 content for Big Endian on Power Ubuntu packages without USN Support IBM Java SDK Security Advisory for AIX Support Windows 10 Creator update Windows Management Framework 5.1 Flash Player PPAPI support (Windows) Adobe Reader DC Upgrade Windows , and 1709 Feature Updates Adobe Acrobat & Reader DC Classic Track Update Office 365 to adopt new changes 3 rd party application patching for Firefox Thunderbird, Firefox for Mac 7 IBM Security

8 BigFix Compliance BigFix Compliance v1.9 patch 2 & 3 Added Windows 2016 support for SCA Server REST API enhancements for better integration Bug fixes, and security enhancements (password policy) SCM Content Updates CIS: AIX: 7.1 CentOS & RHEL: 6, 7 Mac OS X: 10.11, Oracle Linux: 6, 7 Solaris: 10, 11 SLES 11, 12 Ubuntu: 12, 14, 16 Windows: IIS 7/8, 2008, 2012, 2016, 8.1 Oracle Database 11G R2 on Windows & Linux Docker 1.11 SCM Content Updates (cont.): PCI: AIX: 6, 7.1, 7.2 CentOS & RHEL: 6, 7 RHEL 5 Solaris: 10, 11 Windows: IIS, SQL 2008, SQL 2012, 2008, 2012, 2016, 7, 10, Embedded Standard 7, Embedded POSReady 7 USGCB: Windows 7 New SCM checklist wiki page (enhanced usability) 70+ New or Updated Checklists! CMEP (Third party AV monitoring) Symantec Endpoint Protection 14 support DISA: AIX: 6.1, 7.1 HPUX: Mac OS X: 10.10, Oracle Linux: 6 CentOS & RHEL: 6, 7 Solaris: 10, 11 Windows: IE 11, 2008, 2008 R2, 2012, 2016, 7, 8 8 IBM Security

9 BigFix Inventory BigFix Inventory / LMT v9.2.9 Reporting of SAP license usage with integration of SAP License Administration Workbench (SLAW) and SAP USMM Discovery of Oracle Database extended to Solaris Discovery of new components from Oracle, SAP, and Red Hat Adding custom fields to license metric reports Reporting information about the detailed version of software components Stand-alone scanner for monitoring isolated AIX computers BigFix Inventory v Enhanced reporting for SAP license utilization Discovery support for Docker containers under RH OpenShift BigFix Inventory v Enhanced reporting for MS components Augmented capability for SW discovery leveraging MS Add/Remove programs data when SW Catalog signatures are missing Capability to measure SW usage for products discovered via ISO tags rather than executables/processes Visibility and management of End of Support information (new security capability) Extended Oracle database discovery (integrate with updated Oracle LMS scripts) to help with SW Compliance Audits BigFix Inventory Enhanced SW Inventory for Linux environments reporting with optimized smart raw files data discovery based on usage information Resource optimization and enhanced scanning of high volume shared disks discovery. Extension of REST API for easier integration Improved custom SW catalog management to help identify in file system scans raw data files with and without associated signatures. Expanded OS support for the stand alone BFI scanners in support of SaaS and Service provider scenarios Increased support for Microsoft License reporting for Processor/Core based with higher focus on MS SQL and MS Windows Server: Physical Server; Virtual Server; Node/Cluster Oracle product discovery and license usage reporting with focus on Oracle Databases and Oracle Web Logic: Oracle Web Logic discovery and reporting Oracle SOA discovery XEN HyperVisor support for Virtualization Capacity 9 IBM Security

10 BigFix Ecosystem Ecosystem Platform readiness: IBM Security App Exchange Ecosystem content delivery model + infrastructure Documentation Integration submission and validation process IBM BigFix App for QRadar - Fast, Current, and Cost-Effective Views of Endpoint Security Data: Vulnerabilities discovered Patches to be applied Anti-virus deployment status Software installed, processes running, and files stored Configuration compliance status Malware recently identified BigFix Inventory Discovery Pack for vulnerable Apache Struts BigFix + Resilient Search for an IOC from Resilient across endpoints via BigFix Ask BigFix for all known information about a specific endpoint Initiate remediation actions from Resilient BigFix + Carbon Black Cb Agent Management: Deployment and Health Monitoring Direct Threat Management Malware removal: banned files identified by CbP can be removed via BigFix Vulnerability remediation: vulnerabilities identified by CbR (present or exploited) are sent to BigFix for remediation workflow BigFix + Windows Defender Windows Defender Management: Deployment/Enablement and Health Monitoring 10 IBM Security