VR Tenable Integration - CI with multiple IP addresses

Justin Clarke
Tera Guru

Hi Community,

I have an issue that i'm wondering if anyone else has seen.
Scenario

  • A server that has multiple network adapters and ip addresses, say a cluster node.
  • CI has both IP's listed in ServiceNow CMDB
  • Tenable scans both IP addresses and records the same vulnerability
  • Detection are listed correctly on a vulnerability Item
  • When the vulnerability is patched and re scanned by tenable, only one of the
    detections is closed in ServiceNow, Leaving the other open until stale record rules apply.

    ServiceNow Support says this is a tenable issue. Is this something anyone else has seen and has
    any recommendations ?

    Seems strange it would raise the detections but not send close information.

 

 

0 REPLIES 0