HCL BigFix vs Resolve Onboarding and Offboarding Automation

HCL BigFix combines endpoint management, security, automation, and digital employee experience capabilities in one platform. HCL says it supports more than 120 operating systems and provides near real-time endpoint visibility and control. It patches operating systems and third-party applications, and remediates vulnerabilities. BigFix Compliance enforces security policies and automatically corrects configuration drift, while BigFix Inventory provides visibility into devices, software, licenses, and usage. HCL documentation includes integration guides for ServiceNow Data Flow and BigFix Insights for Vulnerability Remediation. Fixlets and actions use SHA-256-based digital signatures; relay and agent communications can be encrypted with TLS. HCL states that BigFix v11 achieved NIAP certification and SCAP 1.3 validation, and that its embedded FIPS crypto module received FIPS 140-2 certification. Subscription support includes product updates, new features, content updates, bug fixes, and technical support during the term. Licensing depends on managed employee devices or managed virtual servers. Pricing is by tailored quote, and HCL offers a 30-day Endpoint Management trial. BigFix SaaS supports up to 50,000 devices per deployment.

Resolve Onboarding and Offboarding Automation coordinates employee lifecycle changes across HR, identity, and IT systems. Onboarding workflows can create accounts, assign entitlements, provision email, VPN, and SaaS applications, deliver software, and notify managers and new hires. Offboarding can disable accounts, revoke tokens, reclaim licenses, trigger device wipes or locks, archive mailboxes, and record actions. HRIS or identity-provider events can start workflows, with actions based on role, location, and department; manual submissions through RITA are also available. The workflow checks licensing, inventory, and access states, flags exceptions with diagnostics, and updates CMDB, ITSM, HRIS, and audit systems. Resolve names AD, Azure AD, and Okta for account creation. Its open integration framework connects custom or legacy tools through REST APIs, SNMP, SSH, TCP, SMTP, or SOAP. The paid product runs through API, self-hosted, and web deployments; pricing is on request.