VR - missing VIT

lak-ann
Tera Contributor

We have been running VR in prod for almost a year. Our SN VR is integrated with Rapid7. 

Came across a scenario that is baffling. The jobs seem to be successful but came across an asset. The Discovered Item record created successfully but there was no  Vulnerable Item record and no Remediation Task.  When we check for other DIs without VIT, we have over 100 records. Has anyone come across this

2 REPLIES 2

john_gibbons
ServiceNow Employee
ServiceNow Employee

It is possible to retrieve assets without any vulnerabilities.  This just means that the asset was scanned by R7.  This happens with the other infra VR scanners as well(Qualys, Tenable, etc...)

John,

    It is not about assets without vulnerabilities. The scanner has detected vulnerabilities for asset in question. and these detections have been integrated for the asset in question. The DI is successfully associated with a CI. There are vulnerability detections and VIT is created. But the VIT is without CI and the VIT is not associated with DI.