The BGFS hosts were installed by vendor. They were then modified by us to meet the most pressing requirements (i.e., "critical" and "high" findings) of the DoD RHEL 7 STIG. The systems have also received updates as part of the normal patching process.
Unlike the hosts set up by us, these boxes use BIOS boot rather than UEFI.
-- JimJacobs - 2020-12-11