[BESAdmin-Announcements] BigFix 10.0 Patch 7 is now available!

Tue Jun 21 11:04:57 PDT 2022

The BigFix Team is pleased to announce the release of version 10.0 Patch 7 (10.0.7.52) of BigFix Platform. The main features in this release are as follows:

  *   Reduce bandwidth usage on specific subnets via a more flexible control of the Direct Download feature

Platform 10.0 Patch 7 introduces a method to allow endpoints using the Direct Download feature when they are connected to specific subnets. This can be useful in scenarios where you want to reduce network bandwidth usage limiting download for specific subnets (e.g. an endpoint moving from VPN to an office network). Click here<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Config/c_managing_downloads.html> for more info.

  *   Improve network usage with a better control of the download process after a Relay switch

Starting from Platform 10.0 Patch 7, you will be able to configure the BigFix Agent in such a way that it will stop the download from the former Relay in case it has switched to another Relay, also if the former relay can still be reached.  This can help in scenarios where you want to control bandwidth usage by ensuring downloads happen from the chosen relay at any time. Click here<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Config/c_managing_downloads.html> for more info.

  *   Enable PeerNest to work also in case of interfering presence of BigFix Agents from other deployments in the same subnet

BigFix Platform 10.0.7 improves file sharing through the PeerNest feature in a scenario where Agents from different BigFix deployments are connected to the same subnet. Up to BigFix 10.0.7, the PeerNest feature does not support such a scenario. The changes introduced in 10.0.7 instead allow Agents configured for PeerNest and belonging to the same BigFix deployment to correctly manage the possible presence of Agents belonging to other BigFix deployments on the same subnet, by recognising and ignoring their PeerNest messages.

  *   Increased level of security by applying the principle of least privilege to specific files of the BigFix deployment

Starting from Platform version 10.0 Patch 7, all *nix components will follow a more restrictive set of access permission to the /var/opt/BESCommon folder and the files in it. Click here<https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099082> for more info.

  *   Web Reports reauthentication

To enhance security for Web Reports, changes to some specific pages now require to re-authenticate using your current credentials. Click here<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Web_Reports/c_reauthentication.html> for more info

  *   Enhanced site Rest API to show the site display name and NMO permissions

BigFix Platform 10.0.7 introduces enhancements to the Site RestAPI to return a new element with this being the site display name as shown in the Console. The site Rest API has also been enhanced to show the requester permissions on a specified site. Click here<https://developer.bigfix.com/rest-api/api/site.html> for more info

  *   Align HTTP response with secure connection policies

Starting with version 10.0 Patch 7, BigFix Platform components configured to use HTTPS will respond with HTTP 301 in case of HTTP requests.

  *   Align with the modern industry standards by reducing maximum validity period for BigFix Agent client certificates to 13 months

Starting from Platform version 10.0.7, the BigFix Agents will have a client certificate with a validity period of 13 months to align with the current industry standards. Click here<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Config/c_client_certificate.html> for more info

CLOUD

  *   Automatic re-correlation after a soft deletion for Plugin Portal discovered endpoints

Starting from BigFix Platform 10.0.7, Plugin Portal discovered endpoints will automatically re-correlate with their native BigFix Agent instances for the scenarios where the endpoints are re-discovered after being removed.

 Click here<https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0093657> for more info

  *   Retrieve VM Custom Attributes via the VMware Cloud Plugin

Starting with BigFix Platform 10.0.7, the VMware Plugin can also retrieve VM Custom Attributes, in addition to the current retrieved properties. This information is visible in the Console and WebUI. Click here<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Config/c_cloudanalysis.html> for more info

Defect Articles (DA), defect fixes and Serviceability enhancements

Added support for

  *   Debian 11 (Agent)

  *   AIX 7.3 (Agent) on Power 9 Architecture

  *   ADD\FF level Windows Server 2016 (Microsoft AD) for BES Server running on Windows

  *   Upgrade of the following libraries:

     *   curl upgrade to version curl-7_83_1

For details, see the technical specification section below.

Additional information about this release

  *   The standalone BigFix tools are published under the 10.0 Utilities section in BigFix Enterprise Suite Download Center.

  *   A Non-Functional Requirements checklist, covering both performance and security management of your BigFix deployment, is available at BigFix Performance & Capacity Planning Resources<https://bigfix-mark.github.io/>

References

  *   See the full technical changelist<https://support.bigfix.com/bes/changes/fullchangelist-100.txt>.

Pre-Upgrade Considerations

  *   This release includes all the BigFix Platform components. It also includes the Plugin Portal that enables the Multicloud and Modern Client Management capabilities.

  *   The unixODBC RPM package is a prerequisite for the Server components on Linux systems (see Server Requirements). This applies to version 10.0.2 and later.

  *   Upgrade paths to BigFix 10 begin with v9.5.10 or later. For details, see Upgrade paths (Windows) and Upgrade paths (Linux).

  *   For detailed information on the specific changes to minimum supported versions of operating systems and databases for BigFix 10, see Detailed system requirements.

  *   Before getting started with the upgrade process, stop any active application that is connected to the BigFix database (such as Web Reports, WebUI, BigFix Inventory, or BigFix Compliance).

Useful links

  *   BigFix downloads and release information<https://support.bigfix.com/bes/release/10.0/patch7/>

  *   BigFix 10 documentation<https://help.hcltechsw.com/bigfix/10.0/platform/welcome/BigFix_Platform_welcome.html>

  *   Home page<https://help.hcltechsw.com/bigfix/10.0/platform/index.html>

  *   Upgrade Windows considerations<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Installation/c_upgrading1.html>

  *   Upgrade Linux considerations<https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Installation/c_upgrading1_linux.html>

  *   Detailed system requirements<https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0087327>

Upgrade Fixlets are available in BES Support version 1469 (or later).

HCL BigFix – Platform Team

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20220621/204bb5dd/attachment.html>