Course Description

IBM BigFix Compliance enforces continuous compliance with security policies throughout an organziation for every endpoint both on and off the corporate network. It includes out-of-the-box support for most popular security benchmarks published by CIS, DISA, STIG, USGCB and PCI-DSS. An intelligent agent on every endpoint monitors, enforces and reports on the security configuration status of the endpoints in real-time regardless of OS type or location. In this course, students will learn to interact and operate the IBM BigFix Compliance solution. They will gain a solid understand of the various components of the solution and will be able to configure, operate, develop reports, perform maintenance tasks, and troubleshoot IBM BigFix Compliance.

Objectives

Upon completion of the IBM BigFix Compliance course, students will be able to:

• Understand Key IBM BigFix Compliance Concepts
• Understand the Features and Functions of IBM BigFix Compliance
• Learn to Configure and Operate IBM BigFix Compliance
• Create custom reports including creating groups; checklist targeting and exception
• Understand how to maintain IBM BigFix Compliance
• Be able to perform basic troubleshooting techniques

Audience

-

Prerequisites

BigFix Fundamentals

• Basic Microsoft Windows and VMWare skills

Content

Day 1 Overview

• Introduction, covering: benefits and advantages; the BigFix portfolio and adjacent IBM products; roles and responsibilities; compliance motivators (Business Needs, IT Needs)
• Key Concepts, including: security vs. compliance; checklists and parameters; reporting; and enforcement
• Features and Functions, such as: enforcing compliance rules; reporting on compliance; and automation of process

Plan and Install

• Architecture of Compliance, including: Scalability (BigFix architecture, checklists, data import); network design; firewalls, proxy servers, and ports; network planning; and reporting groups
• BigFix Platform and Compliance Infrastructure, covering: server and database requirements; disk space; permissions; licensing & masthead; installing BigFix Server, relays, and clients; security and access
• Implementation of Compliance, including: installing the Compliance analytics server; subscribing systems to checklists; configuring data source connection; mail server settings; roles; server settings; session settings; and user provisioning

Configure and Operate

• Navigation, such as: interface navigation and customization, setting default views, creating custom views
• Using checks and checklists, including: check Fixlets; modifying check parameters; activating Measured Value Analyses; creating and managing Custom Checklists; using the Synchronize Custom Checks wizard; taking a remediation action; importing SCAP content; using OVALDI and viewing Windows Vulnerabilities for Oval bulletins
• Exception management
• Reporting, including: running and exporting reports; reviewing existing built in overview and list reports; and customizing reports
• Computer Grouping, covering: creating computer groups for reporting; checklist targeting and exception; computer properties from BigFix

Day 2 Maintain

• Compliance Application management, such as: Extract, Transform, Load monitoring and management; and database management
• BigFix Platform management, including: Fixlet site version; Platform updates and upgrades; process start and stop procedures; and backup & restore

Troubleshoot

• Disaster Recovery planning, covering: backing up the Application Server; and successful recovery from a failure
• Support resources, including log locations; VM Manager command line options; manual catalog updates; IBM support; Forums and self-help