Exception Rules - Automatically request exception on VIs

[Piyush Madhukar]

For the VIs that cannot be remediated immediately or VIs that must be deferred, the remediation owners have to manually request exceptions every time a new VI is identified matching the same condition. Organizations want to automate this process in order to avoid wasting time and effort. They want to schedule the deferring of existing VIs in a future date as well as deferring newly ingested and reopened VIs matching the same condition.

In the Paris release, we have released a capability using which admins can create rules which would automatically defer the VIs matching the condition defined in the rules. In this video, we have explained the process in a step-wise manner.

Please watch this video to learn how to create the rule and defer the VIs automatically. Please reach out to us if you have any questions or feedback.

Thank You!

[lak-ann]

Vulnerabilities can have exceptions applied based on exception rules. 

Are the approved exceptions, updated in the third party vulnerability scanner (Rapid7). That is will there be less number of vulnerabilities to import / integrate after an exception is in effect 

[Hema Mistry]

How to get this plugin? I have Exception management option only.

[Martin Dewit]

@Hema Mistry Exception Rules is a separate Module within VR. You should see it right above Exception Management when searching for "exception" in your Filter Navigator.

[Hema Mistry]

Thanks .

I am not getting this option. I have Vulnerability Response version 22.0.8 and I am on Vancouver release.

I think I am missing some plugin so trying to find that out.

[Eliz Skogquist]

Hi Hema,

It does require the read_auto_exception_rule to view and manage_auto_exception_rule, which don't auto assign to any other role.

Hope this helps!

[Hema Mistry]

I already have these roles. That didn't help.

[Eliz Skogquist]

Have you logged off and logged back in since those roles were assigned?

[Hema Mistry]

Yes I did but that didn't help

[Hema Mistry]

I figured it out with Hiwave help. MY module for exception rule was inactive.

[Ravi Chandra_K]

Need more of these. 

When we check "The execute on existing data" the rule runs through Business rule or we need to run a Schedule job for that.

Kind Regards,

Ravi