To: GS IT All
Subject: October 2022 ePatching for Windows – Deadline 10/26/2022
IMPORTANT – Ongoing BigFix Issues: The DOI BigFix Team is continuing to work with the vendor HCL on resolving reliability issues with authentication into the BigFix Console and Web Reports. The Department considers the issue as “ongoing” until we are told otherwise.
Except for offices with Approved Exceptions …
NOTICE: This Page Has Been Moved.
Please update your bookmarks to:
https://doimspp.sharepoint.com/sites/usgs-ESS/SitePages/FISMA-Tagging.aspx
The final step in moving the USGS DAR encryption project into a compliance phase is to enable automatic shutdowns of non-compliant systems. Respecting the September Fiscal Year Closeout Activities, a decision was made to move the shutdown activities that were supposed to start on August 29, 2022, to Monday, October 17, 2022 providing additional time for sites to remediate non-compliant …
To create a Bigfix Keyfile on Mac, you will need to create a properly named, blank txt file in the BES Agent directory.
su usgs_laps2. cd into BES Agent
cd /Library/Application\ Support/Bigfix/BES\ Agent3. Create a properly named txt file, in accordance with the DOI/USGS BigFix Keyfile guidance: Read More…
The BigFix support team is working to ensure that the BigFix client is installed on all supported systems and that the systems are accurately associated with their proper A&A boundaries and sites. This includes Windows clients, Windows servers, Mac OS, Solaris, and Linux systems.
The GS-Wide: Computer Inventory Details Web Report can be utilized to view …
NOTICE: This Page Has Been Moved.
Please update your bookmarks to:
https://doimspp.sharepoint.com/sites/usgs-ess-tst/SitePages/BigFix-Client.aspx
NOTICE: This Page Has Been Moved.
Please update your bookmarks to:
https://doimspp.sharepoint.com/sites/usgs-ess-tst/SitePages/BigFix-Client.aspx
A list of Bigfix custom reports that can be useful to check the status on local relay services, gather details about clients for inventory purposes, and review current security patches needed.
Excluding some directories from scanning is useful if the directories are large and contain no information that is important to the software inventory. By excluding them, you can speed up the scanning process. You can add directories or remove them from the list by using tasks in the BigFix console. You can also manually add them to the scanner files on particular endpoints.
How to Create a Managed BigFix Keyfile Baseline using SCCM Configuration Baselines and Active Directory Group Policy Objects.
