Configure Device Status Widget

Device Status gives the end-user the option to monitor device compliance status by themselves.

  • Operating System: If there are any outstanding patches available on the machine, this indicator will show as Not Compliant. Otherwise, if the device is updated with the latest available updates, this indicator will show as Compliant.
  • Firewall: If any of the Private, Public, or Domain Firewall policies are applied to the device, it will show as Compliant. If any of the above-mentioned policies are not applied to the device, it will show as Non-Compliant.
  • EPP: If the antivirus is not installed or if the antivirus services are running, this will show as Not Compliant. Otherwise, if the antivirus is installed and running, it will show as Compliant.
  • Windows Remote Desktop: If Remote Desktop connection is enabled on the device, this will show as Not Compliant. Otherwise, if the Remote Desktop connection is not allowed, this will show as Compliant.
  • 3rd party Apps: If an update is available for any of the BigFix supported 3rd-party apps installed on the device, it show as Not Compliant. Otherwise, if the 3rd-party apps installed on the device are updated with the latest patch level, this indicator will show Compliant.
  • File Backup: If One Drive Backup is NOT enabled, this will show as Not Compliant. Otherwise, if One Drive Backup is enabled on the device, it will show as Compliant.
  • Disk Encryption: If the C-drive of the device is not encrypted with Bitlocker, this indicator will show as Not Compliant. Otherwise, if the C-drive is encrypted with BitLocker, it will show as Compliant.

Steps to configure Device Status Widget are as follows:

  1. Go to External Site – BigFix Resolve – Use Configure Device Status Task.
  2. To configure the page for compliance checks on each of the following, select the relevant options from each dropdown:
    • EPP (End-point Protection) has 3 fields to check and configure for compliance for Anti-virus:
      • Symantec
      • Windows Defender
      • McAfee

Select each option to check which one is applicable in your environment, which will check if Antivirus is installed and running.

  • Operation System Compliance has 3 options that allow the end user to check the OS for patch compliance:
    • Outstanding OS patches
    • Outstanding OS and Windows Application patches
    • Custom Sitename

A custom site in BigFix refers to a site that contains custom content and actions specific to an organization's needs.

Custom sites can be created to manage endpoints in a particular department or location, to deploy specific software or patches, or to enforce particular security policies. They can contain custom fixlets, tasks, analyses, and dashboards that provide a tailored view of endpoint activity and compliance.

By creating custom sites, organizations can effectively manage and secure their endpoints in a way that meets their specific needs and requirements.

(Provide the name and URL of the custom sitenames in the relevant dialogue boxes).

Based on the results, select the OS compliance status in the console for the

machine being used.

  • Compliance for third-party applications has 2 options which allow us to check and enforce compliance. To check, select the relevant option from the console:

Note that this is only applicable for Windows applications which are supported on BigFix as well

  • Relevant patches from Windows applications (Which includes – Windows Application and Extended Patches).
  • Check from Custom Site name (provide the name and URL of the custom site names in the relevant dialogue boxes and the site should be available on the console)