Submit exceptions for Scan Engine findings

For Recommend level findings, developers can submit exception requests if they think the issue should not be considered a finding.

Before you begin

Generally, exceptions require approval from a system administrator. However, certain settings configured by a system administrator may determine if the exception is automatically approved or rejected.

Note:

The record under the Scanned Record field of the finding, sn_se_finding, record should be extending sys_metadata table in order for the Scan Engine Exceptions UI action button to be available. For more information on configuring exception properties, refer to Configure exception reason properties.

Role required: Scan Engine Admin (sn_se.scan_engine_admin).

Procedure

1. When a Recommend level finding is detected, select View finding details in the summary banner to open the Findings panel.
2. In the Findings panel, select the Recommend tab to view Recommend level findings.
   
3. On the finding card, select Create exception.
4. Enter the reason in the Exception Reason field for why an exception should be made for this finding.
5. Select Request Approval to submit the exception for review by a system administrator.
   If approval requests are enabled, the exception state is set to Requested. If not, the state is Not Yet Requested.
6. Select OK to save the exception request.
   The finding card updates to show a gray background with an Exception requested label. The Create exception button is replaced with a link to view the exception reason that was entered.