HCL BigFix is a powerful patch management tool that enables organizations to simply control their patch management operations. It is designed so that IT security and operations teams can collaborate in the most effective way possible. Users that employ BigFix can find and fix issues with their endpoints faster than those that employ its competitors. It comes with thousands of security checks that can be deployed quickly and easily. These enable users to safeguard themselves from a wide variety of digital threats.
The most valuable features of BigFix include real-time detection of endpoints, continuous patching with relevant conditions, multi-platform support, easy patching for third-party products, scalability, sub-capacity licensing, software installation, asset management, usability for technicians, endpoint security, software deployment, and stability.
Users appreciate the integration with other tools, reporting capabilities, and lifecycle and compliance models. These features contribute to improved patch management, enhanced control over desktops, convenience in managing servers, efficient software deployment, and reliable operations.
Additionally, BigFix offers flexibility through various scripting languages and the ability to synchronize vendor patches automatically.
Some areas that need improvement on BigFix include the speed of the console, the need for it to become a cloud-based solution, better integration with Hypervisor products like VMware, improved automation to mitigate risks associated with zero-day threats, streamlined deployment and automation processes, enhanced sub-capacity capabilities, localization options for patching, improved dashboard functionality, and more readable and common relevant language.
Users have mentioned the solution needs better integration with vulnerability management solutions, improved user-friendliness for new users, improved reporting capabilities, increased scope of software detection for BigFix Inventory, improved speed and efficiency, support for different systems and equipment, better synchronization for feature updates, and advanced reporting tools.
Clients have experienced significant returns on investment with BigFix, particularly when implementing the solution in organizations with a large user base.
Users have mixed experiences with the pricing, setup cost, and licensing of BigFix. From a technical standpoint, it is strong in security and flexibility but requires a lot of customization. Compared to Azure and ForceWise, it might be considered slightly costly as it requires building one's own infrastructure. The pricing depends on the number of devices, requiring additional licenses for each device added. The exact licensing structure is not clear, but some modules may cost extra.
There are no hidden costs with BigFix, however, additional costs may be incurred for the SQL database.
The primary use case of BigFix is for security, patch management, and compliance in large enterprises and banking institutions. It is used for tasks such as patch deployment, vulnerability scanning, generating reports, and ensuring compliance with security standards.
BigFix is also used for endpoint management, automation, license monitoring, and inventory management. Additionally, it is used for Windows patching, querying configuration management, and deploying applications. It is a customizable tool that requires good knowledge for effective use.
BigFix is deployed both on-premises and on the cloud.
Users mention that there are dedicated technical support engineers available and that opening tickets or seeking help through the BigFix forum is very helpful. Users also appreciate the assistance provided by technical solution architects.
While the support is generally excellent, there may be occasional delays due to workload. Some users mention that there is a lot of web access and online groups available, which they find quite good. However, they cannot speak to the level of support as they don't have access to it directly.
The initial setup for BigFix involves deploying the root server, determining the infrastructure requirements, setting up top-level and renewal releases, and installing the console and agents on endpoints.
The installation process is straightforward and does not require a reboot for agent deployment. However, deploying the solution can be time-consuming, especially when migrating from other products and configuring firewalls.
The deployment process may take several months and requires coordination with network teams. Despite some complexities, the setup is generally rated as easy and straightforward.
It is important to effectively use the solution and configure all features to avoid zero-rate threads.
Maintenance is required on a monthly basis, and a small team is typically needed for maintenance.
BigFix is highly scalable. It provides guidelines for designing the infrastructure to meet scalability requirements. Some reviewers mentioned that they are working with large enterprises that use BigFix and it has scaled well for their needs. The solution is device-based. Some reviewers noted that additional licenses need to be purchased for adding more devices, which may affect the scalability from a financial standpoint.
BigFix is generally stable and reliable. While occasional issues may occur, they are manageable. Customization is required, and small mistakes can pose problems. However, once deployed correctly, the solution has no major issues. Users appreciate BigFix's ability to consolidate security features, particularly its VMware functionality. It is considered a stable product with no bugs or glitches, and it does not crash or freeze.
HCL BigFix Benefits
Some of the ways that organizations can benefit by choosing to deploy HCL BigFix include:
BigFix Features
Reviews from Real Users
HCL BigFix is a highly effective solution that stands out when compared to most of its competitors. Two major advantages it offers are its auto-patching capability and its user-friendly tools.
Santhosh K., the chief executive officer of Catnip Infotech Private Limited, writes, “The second valuable feature is, BigFix also has an auto patch updating feature, where the latest patches, and what is required for my system are automatically downloaded and kept ready for me. The solution applies the patch and notifies me after applying the patch. BigFix also gives me a ping saying that I should reset my system within a certain period of time, while the patch is being applied. Let's say, the patch is being applied and if there's an issue, the solution can revoke the applied patch, and revert back to the old state.”
Benedikt S., an application administrator, says, “It's very straightforward. The usability is very close to everyday technical tools that you use as a systems administrator. So it's quite user-friendly.”
BigFix was previously known as Tivoli Endpoint Manager.
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation