CI Lookup Rules for Tenable.sc?
Hi, I have CI lookup rules OOTB for Tenable.io (type Host Name, Tenable.io) I want to create a CI lookup rule HOSTNAME and DNS for Tenable.sc. What type should I use, custom? Should it be the same script shown here?
Forum Posts
Resolved! Business Use Case/Scenario - Remediation Effort
ServiceNow provides a feature to create "Remediation Effort" from the watch topic. When created this "Remediation Effort" in turn creates a Vulnerability Group ( Remediation Task) and assigned to the respective group. Traditionally Vulnerability Grou...
Resolved! User getting "Invalid attempt. Encrypted data could not be saved" when entering data in an encrypted field
We have a portal form that has a special multi-line encrypted box to put information that my company requires to be encrypted. However non-itil users are getting "Invalid attempt. Encrypted data could not be saved". We are thinking maybe for these n...
Resolved! Roles for creating reports and dashboards?
Hi community, What roles are required to create reports and dashboards in the VR module?Are additional roles required or is sn_vul.vulnerability_admin sufficient?
How are the scanned applications mapped to the existing cmdb applications in AVR
How are the scanned applications mapped to the existing cmdb applications in AVR
How to trigger the risk calculator when VI is imported?
Hi, How can I trigger risk calculator when Vulnerable items are imported from Tenable integration. When data is imported in Vulnerable items table, "Risk rating" should be updated based on conditions I set in calculator. I can do that manually but l...
Resolved! reassign Vulnerable item to another assignment group?
Hi, I wonder what happens if a vulnerable items were automatically assigned to the wrong assignment group during import? What type of functionality should be implemented or configured when a Vulnerable item needs to be reassigned to another assignmen...
Resolved! Role for "Request Exception" on Vulnerable item?
Hi, What kind of roles do I need to see on the "Request Exception" button for vulnerable items?According to docs I created a user with sn_vul.remediation_owner role, but I cannot see VI and "Request Exception" button in form view.
Resolved! Reapply assignments when CIs get updated
Scenario: We have several VITs with CIs that were, at first, manual entered without an OS version. This does not match our assignment rules. Days later, they were eventually updated and discovered with an OS version. After attempting to Apply assignm...
CVSS base score?
Hi, I have a quick question. Where can I find a CVSS base score in instance? Is a CVSS base score is a risk score in Vulnerable item?
Resolved! There is a record with incomplete matching with CI in VIT generation by Vulnerability Response
Linking vulnerability data from third-party scanners (Qualys) to Snow instancesWe are building a flow to generate VIT with Vulnerability Response for CI detected by Discovery (registered in CMDB).It seems that there are records in the VIT that are in...
Resolved! Exception Expiry notification
Hi, I am looking to change the notification to be sent 14 days before expiry, but I cant find the field where I can make this change. Does anyone know where to make that change? I think by default it is 7 days. Notification Name: Exception on VG is...
Resolved! Fixed Vulnerable Items are not changing to closed status even after detected closed/fixed by Qualys?
I am finding multiple vulnerable items that are remaining in Open status, even after Qualys no longer detects them. The Vulnerable Item Detection (DET#) shows them with a Status of Closed and a Source Status of Fixed, however the VIT# still shows as ...
State Change Approvals in Vulnerability item are auto rejected in Vulnerability Response
Hi, We are working on Vulnerability respo se. In VIT record if clicked on "Request exception" the state change approvals are triggering and in Review state. Within few seconds the state change approval is auto rejected. I didn't find anything related...
Fixed Vulnerable Items still show open in Servicenow
We have some vulnerable items that only show a single Open detection, but do not seem to be recorded the Closed/Fixed detection. These items no longer exist in Qualys and wondering why Servicenow still shows them as open. We have rescanned and Servic...
