Home
BigFix and QRadar User Guide
QRadar® provides security intelligence for protecting assets and information from advanced threats. BigFix provides a dashboard that is integrated with QRadar®. This dashboard is called the Manage Vulnerable Computers dashboard and is located within the Endpoint Protection domain in BigFix. From this dashboard, you can view enriched vulnerability and risk data, from which you can quickly identify the computers that are most at risk. You can remediate the vulnerabilities that are detected by QRadar® and you can also quarantine or un-quarantine computers.
Remediate vulnerabilities
Use the Manage Vulnerable Computers dashboard to view and remediate QRadar vulnerability data and quarantine or un-quarantine computers.
Viewing actions
From the Actions tab on the Computers or CVEs view, you can track the progress of actions that you deployed from the Manage Vulnerable Computers dashboard.

BigFix and QRadar User Guide
QRadar® provides security intelligence for protecting assets and information from advanced threats. BigFix provides a dashboard that is integrated with QRadar®. This dashboard is called the Manage Vulnerable Computers dashboard and is located within the Endpoint Protection domain in BigFix. From this dashboard, you can view enriched vulnerability and risk data, from which you can quickly identify the computers that are most at risk. You can remediate the vulnerabilities that are detected by QRadar® and you can also quarantine or un-quarantine computers.
- Overview and getting started
  HCL® BigFix provides the Manage Vulnerable Computers dashboard from which you can view and remediate QRadar® vulnerability data. The dashboard lists the QRadar® Computer Risk Score, CVEs, and CVE risk score, which you can use to quickly identify the computers that are at risk. The dashboard provides a list of the Fixlets and Baselines that are available to take action and remediate CVEs. You can also quarantine or unquarantine computers from the Manage Vulnerable Computers Manage Vulnerable Computers dashboard. An Actions tab shows the actions that you ran from the dashboard.
- Remediate vulnerabilities
  Use the Manage Vulnerable Computers dashboard to view and remediate QRadar vulnerability data and quarantine or un-quarantine computers.
  - Computer details
    From the Manage Vulnerable Computers dashboard, you can view the computers that you manage in BigFix for which QRadar® sends vulnerability information. You can view the QRadar® Computer Risk Score, number of CVEs, CVE risk score, and quarantine information for each computer. You can filter to view only the computers for which there are relevant Fixlets. You can also quarantine and un-quarantine computers.
  - Quarantining computers
    You can quarantine Microsoft™ Windows™ computers from the Manage Vulnerable Computers dashboard.
  - Un-quarantining computers
    From the Manage Vulnerable Computers dashboard you can view all of the computers that you manage in BigFix and view CVEs, associated risk, and quarantine data for each computer. You can also quarantine and un-quarantine Microsoft™ Windows™ computers.
  - Viewing Common Vulnerability Exposures (CVEs) and associated Fixlets
    The Manage Vulnerable Computers dashboard displays vulnerability data from QRadar®. The vulnerabilities detected by QRadar® are known as Common Vulnerability Exposures (CVEs). This CVE data is displayed in the dashboard for the computers that you control as an operator in BigFix. The Manage Vulnerable Computers dashboard does not display all CVEs detected for all computers by QRadar® Vulnerability Manager. Only CVEs with a risk score above a threshold defined in QRadar® are sent to the Manage Vulnerable Computers dashboard.
  - Viewing actions
    From the Actions tab on the Computers or CVEs view, you can track the progress of actions that you deployed from the Manage Vulnerable Computers dashboard.
  - Troubleshooting
    Read this section for information about any known issues using the Manage Vulnerable Computers dashboard.

Viewing actions

From the Actions tab on the Computers or CVEs view, you can track the progress of actions that you deployed from the Manage Vulnerable Computers dashboard.

About this task

From the dashboard, you can view the actions that you deployed to run Fixlets and superseded Fixlets. An Actions tab is available from within both the CVEs view and the Computers view. Actions for the quarantine and un-quarantine Fixlet®s are not shown on the Actions tab.

Complete the following steps to track the progress of actions that you deployed from the CVEs or Computers view.

Procedure

From the Manage Vulnerable Computers dashboard, click the CVEs or Computers tab.
Click the Actions tab.
Select an action to view detailed information about the action execution.