[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-655620-105":59,"doc-detail-655620-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","bigfix-architecture-network-topology-version-20-overview","BigFix Architecture & Network Topology - Version 2.0 - Overview","","BigFix Architecture & Network Topology describes diagram sets for BigFix network and administrator use, covering component architecture, logical communication architecture, and configuration-focused CA&F happy-path flows. It explains how firewall rules and default deployment ports (including 443 and others) relate to diagram communication paths. The content details SSL certificate request and platform/client registration flows, including key exchange steps, connection handling across relays, timeout behavior, and the server’s CA role. It also provides network legend port references.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/bigfix-architecture-network-topology-version-20-overview/655620/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/bigfix-architecture-network-topology-version-20-overview/655620.png","ImageObject",300,407,{"name":92,"@type":93},"Genevieve","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-30","2026-10-25",true,{"@type":102,"interactionType":103,"userInteractionCount":81},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Who is the intended audience for these BigFix network topology diagrams?","Question",{"text":112,"@type":113},"Network and BigFix administrators responsible for securing organizational networks for BigFix operations.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What are the three types of diagrams included in the document?",{"text":117,"@type":113},"Component Architecture, Communication Architecture (Logical), and Communication Architecture & Flow (CA&F).",{"name":119,"@type":110,"acceptedAnswer":120},"When is the BES Client Certificate Request flow initiated?",{"text":121,"@type":113},"When the Endpoint starts the BES Client Service for the first time or after a prior Certificate Request failure.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},655620,1793052350,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":81,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145},1374391974585,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","BigFix Architecture & Network Topology  \nVersion 2.0 © Copyright HCL Technologies Limited® 2023 1  \nAudience & Purpose  \nThe primary audience for these diagrams consists of network and BigFix administrators in an organization charged with securing their networks for the operation of BigFix. For example, these diagrams can provide input into how firewalls should be configured. Some of the diagrams might be used by BigFix Administrators to debug BigFix behavior across the network. These diagrams use default deployment ports, e.g., 443, 52311, 52315, you may have installed with a different set of deployment ports.  \nThere are three types of diagrams in this document:  \n• Component Architecture – identifies a subset of BigFix components without any communication information. Only components and sub-components with non-localhost communication are shown.  \n• Communication Architecture (Logical)– documents the communication flow between components. Includes:  \n• Communication initiation directions  \n• Default ports used  \n• Protocols used  \n• Communication Architecture & Flow (CA&F)– focuses on a specific BigFix configuration and use case. The diagram on these slides is accompanied by the documentation of a “Happy Path” flow.  \nImportant: These diagrams are not a substitute for the diagrams or guidance provided by HCL’s official product documentation. A future version of these diagrams may be distributed as part of HCL’s official product  \ndocumentation.  \nVersion 2.0 © Copyright HCL Technologies Limited® 2023 2  \nPlatform  \nVersion 2.0 © Copyright HCL Technologies Limited® 2023 3  \nPlatform: Component Architecture  \nVersion 2.0 © Copyright HCL Technologies Limited® 2023 4  \nPlatform: Communication Architecture  \nCustomer supplied SSL Cert  \nBigFix Generated Trusted SSL Cert  \nVersion 2.0  \n© Copyright HCL Technologies Limited® 2023  \n389/636/3268  LDAP  \nN/A  ICMP  \n5  \nCA&F: BES Client Certificate Request  \nBES Client Certificate Request Flow  \nThis flow is initiated when the Endpoint starts the BES Client Service for the very first time or after a prior Certificate Request failure.  \nKey Exchange steps:  \n1. The Client generates a local key for a Certificate Signing Request (CSR) and sends it to the Server via a Relay or path of Relays.  \n2. The Client/Relay(s)/Server attempt to open and hold a concurrent connection across all required communication paths ( a b c ) from the Client to the Server.  \n• Each component (client, relay and server) will timeout the connection based on the following Relay setting:  \n_[HTTPRequestSender_Connect_TimeoutSeconds](HTTPRequestSender_Connect_TimeoutSeconds)  \n• Each Relay adds its own IP Address to the request forming a chain back to the Client.  \n• If the Relay fails to gain a connection to the Root Server Service, due to timeout, the certificate request attempt is failed.  \n3. The Server, acting as a certificate authority (CA), generates an SSL Certificate using the provided CSR.  \n4. The Server sends the SSL Certificate back to the requesting Client via the ( c b a ) path.  \n5. The Client stores the SSL Certificate.  \nNetwork Legend  \n\n| Port | Line | Notes |\n| --- | --- | --- |\n| 52311 | | [HTTPS](HTTPS) |\n\nVersion 2.0 © Copyright HCL Technologies Limited® 2023 6  \nCA&F: Platform Registration  \nNetwork Legend  \n\n| Port | Line | Notes |\n| --- | --- | --- |\n| 52311 | | [HTTPS](HTTPS) |\n\nBES Client Registration Flow  \nRegistrations are initiated:  \n• When the computer starts the BES Client Service, e.g., post-install, reboot or after the BES Client service is killed.  \n• When the register interval ( _BESClient_Register_IntervalSeconds) is met.  \n• When a Relay responds to a Client Service request by telling it to re-register due to the Relay clearing its registration list. Controlled by setting: _Enterprise Server_ClientRegister_ClientRegistrationExpirationPeriod.  \n• On any Registration failure.  \n• Every time the BES Client Service chooses a new Relay (not a re-selection of the existing one) .","cbCaiioyPzBBJwr2","https://ap.wps.com/l/cbCaiioyPzBBJwr2","pdf",933714,42,"English","# Audience & Purpose\n# Types of Diagrams\n# Platform\n## Component Architecture\n## Communication Architecture\n# CA&F: BES Client Certificate Request\n# CA&F: Platform Registration\n# BES Client Registration Flow\n# CA&F: Client Persistent Connections","[{\"question\":\"Who is the intended audience for these BigFix network topology diagrams?\",\"answer\":\"Network and BigFix administrators responsible for securing organizational networks for BigFix operations.\"},{\"question\":\"What are the three types of diagrams included in the document?\",\"answer\":\"Component Architecture, Communication Architecture (Logical), and Communication Architecture \\u0026 Flow (CA\\u0026F).\"},{\"question\":\"When is the BES Client Certificate Request flow initiated?\",\"answer\":\"When the Endpoint starts the BES Client Service for the first time or after a prior Certificate Request failure.\"}]","BigFix Architecture & Network Topology - Version 2.0 - Overview | PDF",1792962893,106]