How to close VITs that are associated with closed/deleted CIs in Tenable

sath · ‎08-02-2023

Hi,

If a CI is deleted in Tenable those associated VITs should be closed in ServiceNow. How to achieve this requirement?

NewSNAdmin · ‎08-21-2023

Try using the auto-close detections based on detections last found (from Auto-Close Configuration).

You may set the number of days in the "Detections last found (days ago)" to any number you like 30/60/90.

ServiceNow will wait for a response from Tenable after that number of days. If it no longer sees that vulnerability for that CI, ther VIT will auto close.

View solution in original post

NewSNAdmin · ‎08-21-2023

Try using the auto-close detections based on detections last found (from Auto-Close Configuration).

You may set the number of days in the "Detections last found (days ago)" to any number you like 30/60/90.

ServiceNow will wait for a response from Tenable after that number of days. If it no longer sees that vulnerability for that CI, ther VIT will auto close.