Rescan records and remediation tasks in the Vulnerability Manager Workspace

To verify that your remediation tasks and records have been resolved between scheduled scanning cycles, initiate rescans from your ServiceNow AI Platform on-demand.

Role required: sn_vul.vulnerability_analyst or sn_vul.vulnerability_admin.

Rescans permit you to verify that your remediation activities, patches, and other actions have successfully fixed specific vulnerabilities on your configuration items (CIs).

The Rapid7 and Qualys scanners are deactivated by default in the Vulnerability Response application. If you try to perform a rescan from the vulnerable items or remediation tasks that have these applications as a source, the Rescan button is not available.

To activate these scanners, as a user with the sn_vul.vulnerability_admin role:

1. Navigate to All > Vulnerability Response > Vulnerability Scanning > Scanners.
2. Locate the scanner product that you want to activate and click the record to open it.
3. Select the Active check box.
4. Click Update.

   The product you activated is displayed in the Source field on the vulnerable item and remediation task records after the next import, and Rescan is available as a UI action.

Rescan is supported for records and remediation tasks with the following integrations in the Vulnerability Manager Workspace. See the following topics for more information:

• Rescan Rapid7 vulnerable items from the Vulnerability Response workspaces
• Rescan Qualys vulnerable items from the Vulnerability Response workspaces
• Rescan Tenable.io and Tenable.sc vulnerable items from the Vulnerability Response workspaces

To initiate rescans in the Vulnerability Manager Workspace from vulnerable item and remediation task records, the records require a supported scanner as a source.

You might prefer to create a filtered list that displays records by their source. See Create a customized list of records for an example of how to create a list.