Skip to content Skip to site navigation Skip to service navigation

Endpoint Configuration Management (BigFix)


Stanford uses IBM BigFix — to deploy patches and updates to Windows and Macintosh computers. BigFix also provides a consistent and reliable way to remotely configure power settings. BigFix is administered by the Information Security Office in collaboration with others across the University.


The Endpoint Configuration Management service provides the following benefits:

  • It allows Stanford to install critical security patches on computers as soon as they're made available by Microsoft and Apple and tested here.
  • Release of patches occurs after broad campus-wide testing and follows a rigorous, but rapid, procedure.
  • BigFix is an agent-based software solution. Each computer communicates with the BigFix server to determine its patch status. The server automatically applies appropriate updates once they have been released.
  • Certain basic inventory information about the computer—such as the presence or absence of critical security updates, IP address, operating system, and some hardware data—is collected. A complete list of collected information is always available.

Get started

Client software must be installed on all computers that are to be managed by the BigFix system administrators.

Learn more

For IT providers

Last modified April 21, 2017