HCL BigFix QRadar® User Guide

QRadar® provides security intelligence for protecting assets and information from advanced threats. BigFix provides a dashboard that is integrated with QRadar®. This dashboard is called the Manage Vulnerable Computers dashboard and is located within the Endpoint Protection domain in BigFix. From this dashboard, you can view enriched vulnerability and risk data, from which you can quickly identify the computers that are most at risk. You can remediate the vulnerabilities that are detected by QRadar® and you can also quarantine or un-quarantine computers.

QRadar® sends vulnerability data to BigFix via the BigFix REST API. To use the Manage Vulnerable Computers dashboard in BigFix, you must have the following components, in addition to your BigFix deployment:
  • You must have QRadar® Vulnerability Manager installed and configured to scan your network.
  • You must have a license for BigFix Compliance, which entitles you to use the Manage Vulnerable Computers dashboard in BigFix.
  • You must complete some configuration steps in QRadar® to connect QRadar® Vulnerability Manager with BigFix. QRadar® sends vulnerability data to BigFix via the BigFix REST API. For information about how to complete the configuration steps required in QRadar®, see the QRadar and BigFix Integration documentation.

If you have these components available and configured, you can install the plugin for the Manage Vulnerable Computers dashboard from within the BigFix console. This guide describes how to install the plugin to set up the Manage Vulnerable Computers dashboard and also describes how to use the dashboard in BigFix.