VIT and Detection records not closed when not detected by scanner

Shaik Abdul Mu1
Giga Expert

Hello Everyone,

 

We have an open VIT and open detection records; however, the detection was not found since a month. 

I believe when no detection found, respective detection record should be marked as closed and also the VIT record.

 

But in our case, the records are still showing open.

 

Is my understanding wrong? Am I missing anything here?

 

Please suggest.

 

Thanks

Abdul Musavvir

1 ACCEPTED SOLUTION

Shaik Abdul Mu1
Giga Expert

I figured it out; we have added some user defined parameters where superseded_qids are excluded from scanning. Modifying that worked.

View solution in original post

3 REPLIES 3

bharanikumar20
Tera Expert

Hi, If the Vulnerable items's state is not in In review or deffered, the Detections will be marked as stale for the assets that have not been scanned for defined number of days
and If the detections are in : stale or closed state , the VITs will be auto closed by the rule.

Hi,
I have seen same issue recently - The VIT record is in open state even though the detection is closed as stale. Still investigating for the solution/reason for this issue.
And also the vice versa condition - The VIT is in closed state when the Detection is still in open state. Where this detection records move when the VIT is closed.

Shaik Abdul Mu1
Giga Expert

I figured it out; we have added some user defined parameters where superseded_qids are excluded from scanning. Modifying that worked.