What to expect after installing BigFix

Desktops and laptops

You will be prompted to register your computer through a simple, quick process: Follow the instructions at Registering Your Computer.

BigFix will run in the background, and the BigFix icon will appear on the system tray (Windows) or menu bar (Mac OS X).

BigFix will automatically install required security software, such as Forescout SecureConnector, so you do not have to install the software on your own. The security software will:

• Verify that devices meet UCSF’s minimum security standards
• Search for signs that a system has been compromised
• Collect forensic data if a security alert is triggered

If the system needs patching, you will be prompted to accept the patching task through a pop-up window. You can defer this task, but if it is deferred too long, the pop-up will stay in the foreground, and you will not be able to dismiss it.

The system will reboot after the patching task has completed. If the system is significantly behind in patching, multiple reboots may be necessary.

Servers and Linux workstations

BigFix will be started automatically. It will show up in the Services Snap-in (Windows) or as a process (Linux / Unix). The BigFix client will run in a locked state. It will report back to the server, but it will not run any jobs that would apply patches or make changes on the system.

BigFix will run in the background, consuming minimal CPU resources, and will periodically check in with the server to provide ongoing updates of the system status. 

BigFix on lab computers and data collection computers

The default BigFix installer will work on most computers that are attached to data collection devices. However, in unusual circumstances, the BigFix client may install and reboot for patching rather than indefinitely deferring patches.  

For those cases, your computer can be categorized to require communication before an automated unscheduled reboot. To request placement of your computer in this category, contact the IT Service Desk at 415-514-4100 and provide the computer hostname.

Registration is required for these systems. However, an exemptions request process has been integrated into the manual registration form: https://ucsf.service-now.com/ess/device.