To ignore some configuration item (CI) classes, for example Load Balancer [cmdb_ci_lb], when running CI Lookup Rules, set the ignoreCIClass [sn_sec_cmn.ignoreCIClass] system property.

Before you begin

Role required: admin
Note:

The ignoreCIClass system property is available starting with Vulnerability Response v9.0, however, the property functionality is not available upon upgrade from any previous version.

If you have upgraded from any Security Operations application, prior to version 9.0, see KB0788209 for instructions on how to enable this functionality.

Procedure

  1. Enter sys_properties.list in the left navigation bar.
  2. Click Enter.
  3. In the Search menu, under Name enter sn_sec_cmn.ignoreCIClass.
  4. In the Value text box, enter the CI classes to exclude in a comma-separated list.
    ignoreCI Class system property example.
  5. Click Update.
    This list is used by CI Lookup Rules during the next import. Vulnerable items created during import are not associated to a CI of any type listed in the Value field of the sn_sec_cmn.ignoreCIClass system property.