BigFix Reviews

The most valuable features for us are scalability and reliability. Hands down.

My organization came from a product that was not nearly as reliable. It was causing failures across our infrastructure and across our enterprise. Switching to BixFix has alleviated that to a great degree.

The other part is it's now allowing our company to think ahead how we can incorporate other pieces of BigFix that other solutions don't have integrated natively. So we can get five or six product sets out of BigFix as opposed to just a single product set on a solution that didn't even work to begin with.

IBM dropped what's called BigFix Detect on us here at Interconnect this year. That blew our socks off because we had just completed signing a contract with a software that does almost the exact same thing called Carbon Black. So we came here and noticed that they're putting a Carbon Black type solution into BigFix. I will be curious about how that particular application develops over time and into the future. I'd like to see them continue to scale that out.

A major feature that I think they need to add to Detect is application whitelisting. That will be incredibly important. If they can get that I might be able to convince my company to start using that.

Stability is excellent. It doesn't crash, it can handle whatever we throw at it. It does a good job with that. Other solutions that we've had haven't panned out that way.

Scalability is excellent. There are people here who are using BigFix in much larger deployments than what we have. We're not small by any means but we're also not the largest out there. We know we can trust with confidence that we'll scale up well over time.

We haven't had to use the technical support at all.

We were using a different solution before this and we outgrew it. My company has gone through a period of hypergrowth and we went from handling just a few years ago 60 stores with maybe 500 endpoints in them, to 1600 stores now with tens of thousands of endpoints. So we knew we needed a new solution because the one we had just kept breaking, over and over.

I was not involved in the initial installation.

For myself as a manager who makes business decisions like selecting a vendor, there needs to be a level of trust and a level of partnership where I can go back to this vendor and actually get support and help if we need it, when we need it. Interconnect has been a great resource for that. So there's got to be that trust level there, absolutely.

I will never push a product I don't believe in. So I have to see that it works. I would argue the same is the case for anyone above me in our business or enterprise. We don't want to work with vendors whose products are half-baked. They have got to work.

So we ended up with IBM because we are partnered with GameStop and they were already using the product and saw that it worked. So we didn't formulate a shortlist off the bat. We said let's try GameStop's product and see how well that works for us, and then if it's not working we will go out and make a shortlist. So we didn't have to do that, fortunately.

The advice I would give is not to be turned off from the learning curve. There is a little bit of a learning curve to it. But that learning curve is there for a reason and the talent that goes into actually using BigFix properly takes a little while to tune, but that is what makes BigFix so powerful. That being said, as a result of that you're going to get reliability and scalability and a much faster response time than probably most products out there.

The most valuable features of the solution are Windows patching and the hardware and software inventory. The solution's reporting is very good in a single console.

The solution’s pricing could be improved.

We have been doing a POC for the last three months with BigFix's Evolution version.

I rate the solution a nine out of ten for stability.

Around 500 users are using the solution in our organization.

I rate the solution an eight or nine out of ten for scalability.

Intune only supports Windows and does not support other platforms like Unix and Linux. On the other hand, BigFix supports all platforms.

The solution's initial setup is simple and not complex. I have done the full server installation and configuration thrice, and it's not complex.

On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing one out of ten.

Patch management is configured in existing endpoint computers. We are pushing the custom policy deployment in weekly patches, which require critical and important patches. Since it's a by-policy, it's pushed automatically. We have enabled the solution's remote endpoint management option, but we are primarily focussing on licensing hardware and software inventory.

BigFix's integration with our IT infrastructure was easy. I would recommend the solution to other users.

Overall, I rate the solution ten out of ten.

The solution is being used for automation. We deploy the package as customized software, and we provide ad-hoc requests via BigFix.

The solution is deployed on the cloud, but it can also be installed on-premises.

The most valuable features are patch management, software installation, and asset management.

I would like the dashboard to be improved to show the problematic machines and good machines.

I have used BigFix for five years.

It's very stable.

We can scale up or down according to our needs.

Technical support is responsible and knowledgeable. They're supportive when we have any issue in the environment and require help from them.

We can troubleshoot the tool. If there are any major issues, we go to the support team for help.

I would rate technical support as five out of five.

The setup is easy. I would rate it as five out of five.

It requires maintenance every month. Only two or three people are needed for maintenance.

We used a third-party consultant.

BigFix is very easy to use. I have also used SCCM, but there were issues with the machine not restarting. There were many problems produced in the environment and in the agent. In BigFix, I haven't seen any issues with the agent. It works smoothly.

I would rate this solution as 10 out of 10.

We are a global security and cloud integrator, and we are also a reseller with a capability of up to 69 brands, but we're not married to anybody. Our goal is to give customers exactly what they need based on the scenario. We build everything that we sell. So, we have a large distribution partner that enables us to resell a lot of things. We definitely and always see what's hot in the market, and we are constantly reviewing technologies.

Patching and mobile device management are probably two of the biggest use cases of BigFix. 

In terms of the version, some of the clients have the latest version. BigFix is not a subscription as a service. It is not a SaaS model. It is an on-prem model for infrastructure teams to manage folks through the web or through the network, and it is not provided as a service. There is no open-source capability, so it doesn't really have an ecosystem around it. It's basically sold to clients for specific use.

For security these days, patching is obviously mission-critical. If you leave something unpatched, the vulnerability is easily found by the adversary, so that's critical. 

Mobile device management is also critical from the security aspect. BigFix is useful in scenarios where if a device is lost, you can disable it, and you can wipe it. All the company data that is available is completely encrypted, and it is basically illegible or not usable. People even have BigFix Mobile that they put on phones and other peripheral devices. You are basically putting a wrapper around the applications that are company applications in the bring your own device (BYOD) scenario.

It is for multiple use cases. A lot of people are looking at it just for security, and that's really endpoint security. The endpoint management part of it in terms of being able to constantly do patching for Windows, Unix, macOS, Cloud, Raspberry, VMware, and all Linux flavors is important, and they are very good at that. They have support for virtually every OS on the market.

A lot of people also use it for infrastructure value. HCL has changed the focus a little bit because it was originally looked at as a pure security tool on the IBM side for mobile device security, but since HCL took it over, it has become more focused on other different components. They've created REST APIs for the cloud, and there is now a scripting language that's associated with it. So, there are more broad use cases because the industry requires that. They also have their own development tool in BigFix.

HCL is India-based, and they've done a good job with BigFix, and they're also able to deliver the software at a lower price now. The integration is better with other security and vulnerability management tools. To remediate endpoint issues that are out there, they integrate with Tenable, Qualys, and others. So, you can manage all of your patches and fixes through one platform, even for all cloud services, which is a good thing. 

Training is obviously important, and HCL has done a better job than IBM at making that training available. Usually, there are different ways to do that, such as through video or self-service, etc.

I remember doing restarts a few times. So, making sure that it is rock solid from an executable perspective is important.

I have been working with all kinds of security tools, including this one, since 2001 or so. It has been 21 years.

We have interacted with them. They've been good and better probably in BigFix than some of the other tools that they acquired in that IBM divestiture. 

It is pretty easy to implement.

I would rate it an eight out of ten. It does everything reasonably well. There are so many competitors who do just one piece of this, or they're not really head-up competitors because some are into mobile security, and some are more into mobile endpoint management and patching.

We are an MSP, and we use this solution for our customers as well as for our company. 

I use BigFix for everything. I use it for patch management, software distribution, OS deployment, server automation, and inventory and asset management.

BigFix is a great product. The flexibility of putting together your own relevance and retrieving custom data from any one of your agents is a valuable feature. It is one of my favorite features because if a boss asks me, "How many of these devices do we have?", I can put together a report in two seconds.

The only thing that I don't like about BigFix is that it does not support other devices such as printer firmware, router firmware, and things like that. I will be happy if I can control everything and get everything else in there, even if it is just a line item.

They can do some enhancements to the Web UI. I am trying to get customers to be able to manage their environment by using Web UI, and it would be good if we can delete endpoints by using Web UI. We should also be able to generate Excel content or data tables from the Web UI without having to go to the console. It is small stuff, and it drives me crazy that I have to go to another console to do these things.

I have been using this solution for years.

It is a pretty stable product. There are problems only if you mess up during the installation. If you do it right, then everything is fine.

It is scalable. It is able to handle up to 250,000 devices. So, you should be fine with anything under that. 

I work with all kinds of customers. I have small customers with 30 endpoints, and I also have a couple of big customers with 30,000 or 40,000 endpoints.

It has been great since it became HCL.

I know how to use them all. I have used Asterisk and other solutions, but I got used to BigFix. BigFix is pretty straightforward.

Its initial setup is straightforward.

I would advise taking some of the training so that you can use the product to the fullest potential. It is a huge and flexible product, and you can take advantage of a lot of stuff if you know how to do it. If you don't know, you're never going to take advantage of it.

I would rate BigFix a ten out of ten.

The primary use case of this solution is for patch management, software distribution, inventory, and power management.

BigFix has helped us to compress our patch cycles. We typically do one release a month. Where we really benefited from this solution is that we now have one to two people whereas previously we would need thirty to forty people taking care of it. That's where we benefited from BigFix the most. We've never had central patching before, so BigFix has improved things quite a bit.

It has helped to reduce software spend. We do have the inventory component, but it's not fully implemented yet. We know that the software does take out certain data and so now we have better data.

We are able to go from patching thousands of machines by twenty to thirty people to one person. 

I would like better support on the backend.

It's stable. We occasionally run into hic-ups here and there. We've been working with BigFix for eight-plus years and occasionally things happen. 

We're in the tens of thousands and we're under twenty thousand endpoints. It's been pretty easy to maintain.

Their technical support can be helpful. We send a PMR and they are pretty helpful. I would give them, on a scale from one to five, with five being the best, around a four.

The initial setup was straightforward on the BigFix side. We had some internal stuff that caused some issues but otherwise it's pretty straightforward. 

We implemented in-house. 

We were looking for something that could run Mac and Windows. At the time SCCM didn't do anything with the backend side. We tried to set SCCM up but it seems to be more complicated than it needs to be. BigFix has one central database and is easier. 

I would rate it an 8.5 out of ten. BigFix has a great community, there's a lot of people that believe in it, it's whatever they advertise, and they listen to customers' feedback. We are heavily on-prem and with BigFix we have that option of staying on-prem. 

Patch management: We've gone from hideous to amazing.

The most valuable feature is the extensibility of the tool. We're able to implement solutions through available APIs and custom solutions. We're able to provide services quickly. We're able to provide services completely.

A lot of my suggestions have already been submitted through RFEs; some of them involve inspector enhancements in the end point. We've got enhancement requests on the BigFix Inventory side. I know that it's not quite as mature a product as BigFix is.

I think the current tool is fairly robust. We have ways of breaking it, though.

We're pushing the limits of the tool. We've got over 250,000 devices in our environment; probably one of the larger customers. There are a few that are larger. But we're also doing a lot with the tool that I think other customers aren't. We're doing software distribution as well as patch management. We're also doing inventory and software usage analysis. I don't know of too many other customers that are doing that.

Technical support depends on who you get. I deal with some amazing support folks, and then I've dealt with some less-than-amazing support folks.

Our previous tool was the predecessor to BigFix, Tivoli Configuration Manager. We were entitled to migrate from TCM to BigFix, so it was kind of a no-brainer.

I was involved in the initial setup. It was very straightforward. The implementation was pretty easy.

BigFix was on our short list before they were IBM. We decided against them because they were a small company, even though their solution was better than some of their competitors. Management knew it was too much of a risk to go with BigFix. When they finally became IBM, again, it was a no-brainer because they were on the top of our list of vendors satisfying the feature requirements and now they had the backing of IBM, so it made sense.

We looked at Alteryx. We looked at Microsoft SCCM. SCCM was a big competitor.

I don’t have that many criteria when selecting a vendor.

The advice that I would give depends on the problem that you are trying to solve. I spoke with a number of people at an IBM conference (users looking for a high-end endpoint security software who were potentially going to install BigFix), and they had nothing but good things to say about the tool and the people supporting it.

It's a well-developed tool, supported by people who are passionate about it.

Our primary use case is for endpoint configuration management.

Our patch cycles are much faster. They usually all happen within a few days or less.

The most valuable feature is the patching. 

It's much more flexible than SCCM. There are more things we can do and especially the cross-platform support is better. 

It actually increased network traffic. Microsoft and Apple have incredibly large downloads, so when you're downloading to thousands of machines it's huge.

I would like to see more emphasis on using the web console, to have the same power as the full fat client console that they do they now. It's a lighter way to log in and it would be faster for our operators to do their work. The console tends to take a long time for a large number of clients.

It's stable. I've been running it for more than ten years and it's generally pretty good. 

Scalability is very good. It's scaled to our current needs.

Their technical support is decent. 

The initial setup was straightforward. 

We implement in-house. 

I would rate it an eight out of ten. 

I would advise a colleague considering this solution to definitely understand what your needs are and see if the product meets those needs. Don't try to shoehorn your needs into a tool.