Understanding the Microsoft Security Response Center Solution Integration

Review and implement proposed remediation solutions provided by the Microsoft Security Response Center Solution Integration.

Microsoft Security Response Center Solution Integration is included in the Vulnerability Solution Management feature of Vulnerability Response, available by separate subscription. See Vulnerability Solution Management for more information on how Vulnerability Response incorporates solutions.

Microsoft Security Response Center investigates reports of security vulnerabilities affecting Microsoft products and services, and provides solution information to help manage security risks. Solutions are known remediations imported into your Microsoft Security Response Center Solution Integration from the Microsoft Security Response Center product.

The Microsoft Security Response Center Solution Integration contains entry points to Microsoft Security Response Center product, invoked as scheduled jobs. Scheduled jobs simplify the vulnerability remediation lifecycle by keeping the instance synchronized with other vulnerability management systems. Scheduled jobs run automatically and in the order specified. You can also execute individual scheduled jobs manually.

There is a configured run-as user for each integration record. The default value for this user is VR.System. Do not change this value.

Available versions

For the most current version of Vulnerability Solution Management and Microsoft Security Response Center solutions, verify you have the most current version of Vulnerability Response installed.

For more information about installing and configuring Vulnerability Solution Management and solution integrations, see Install the Solution Management for Vulnerability Response application and Configure installed solution integrations for Vulnerability Solution Management using Setup Assistant.

Release version of Vulnerability Response	Version of Vulnerability Solution Management	Release Notes
Vulnerability Response v15.0	v10.3	For compatibility information, see KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes

Roles

Microsoft Security Response Center Solution Integration tasks involve the following roles.

• sn_vul.vulnerability_admin or sn_vul.admin (deprecated): Can read, write, and delete records.
• sn_vul.vulnerability_write: Can read and write records.
• sn_vul.vulnerability.read: Can read records.
• sn_vul.remediation_owner: Can read and write internal notes on records assigned to the remediation specialist group or individual. (Contained in the itil role.)

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

Microsoft Security Response Center Solution Integration

To view the Microsoft Security Response Center Solution Integration, navigate to All > Vulnerability Response > Administration > Integrations.

The following integration is included in the base system.

Table 1. Microsoft Security Response Center Solution Integration

Integration	Description
Microsoft Security Response Center Solution Integration	Retrieves solutions and National Vulnerability Database (NVD) mapping to associate solutions with vulnerabilities, vulnerable items, and remediation tasks. Note: The Microsoft Security Response Center Solution Integration does not provide solutions prior to 2016.

Solutions

To view imported solutions in a list, see View a solution.