Vulnerability management Exception Rule extension

[alhassuz]

I have an existing Exception Rule that is active with a "Valid to" date expiring soon. I selected the "Request Extension" option from the rule and entered the new date, upon approval, this only updated the "Deferred to" date. 

1) the Valid to date means that it will no longer run on new VI's, correct?

2) how can I update this "valid to" date to the new date without creating a new rule?

[kaushal_snow]

Hi @alhassuz ,

1. Yes. The Valid to date defines the end of the time period during which the exception rule can be applied to new VIs. Once that date passes, the rule does not apply to fresh VIs. Only the Deferred to date reflects the extended deferment of existing VIs.

2. No, using the Request Extension functionality only updates the Deferred to date; it does not update the Valid to date. Currently, there is no out-of-the-box process to modify Valid to for an existing Exception Rule.

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.

[alhassuz]

Thank you! 

Is the best practice, to cancel or let the old rule expire, wait for VI's to reopen then duplicate the rule with the new extended dates? Or can we just create the new rule without waiting for the deferred VI's to reopen?