- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-10-2022 09:19 AM
Hi,
When I use "Mark as False Positive" button in Remediation Task, all associated VIs states got changed to Closed.
RT status is Closed.
And if I use Reopen button in RT, Remediation Task status changes from Closed to Open, but all associated Vulnerable Items not. All Vis remain Closed.
Is this behavior to be expected in SN? Can someone explain this?
Solved! Go to Solution.
- Labels:
-
Vulnerability Response

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-10-2022 01:21 PM
Hi,
Take a look at the States:
https://docs.servicenow.com/bundle/sandiego-security-management/page/product/vulnerability-response/concept/vulnerabillity-states.html
Basically, the intent is for a Scanner to "close" or "reopen" a VIT. The Fase positive is a way to say that this is not an issue and to "Close it" regardless of what the Scanner thinks. Once a VIT is in a closed State, reopening a Group does not affect this State.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-10-2022 01:21 PM
Hi,
Take a look at the States:
https://docs.servicenow.com/bundle/sandiego-security-management/page/product/vulnerability-response/concept/vulnerabillity-states.html
Basically, the intent is for a Scanner to "close" or "reopen" a VIT. The Fase positive is a way to say that this is not an issue and to "Close it" regardless of what the Scanner thinks. Once a VIT is in a closed State, reopening a Group does not affect this State.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-11-2022 01:18 AM
Hi
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-11-2022 02:09 PM
Hi
There is one thing I would like to ask.
When the user Reopen RT, all VIs remain Closed and RT status changes from Closed to Open.
What is the purpose of RT with Open status when all related VIs are Closed?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-12-2022 04:53 AM
Hi,
I agree that this is not an optimal situation. There is not really a great use case to have the RT open and all the VITs Closed. I guess in theory a user could reopen an RT and manually add more VIT? I am not sure why they would want to do this but they could?
Thank you for clarifying