VR Tenable Integration - CI with multiple IP addresses
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-05-2024 08:37 PM
Hi Community,
I have an issue that i'm wondering if anyone else has seen.
Scenario
- A server that has multiple network adapters and ip addresses, say a cluster node.
- CI has both IP's listed in ServiceNow CMDB
- Tenable scans both IP addresses and records the same vulnerability
- Detection are listed correctly on a vulnerability Item
- When the vulnerability is patched and re scanned by tenable, only one of the
detections is closed in ServiceNow, Leaving the other open until stale record rules apply.
ServiceNow Support says this is a tenable issue. Is this something anyone else has seen and has
any recommendations ?
Seems strange it would raise the detections but not send close information.
0 REPLIES 0