Cancel an approved rule to be able to update it. For example, before you can modify any dates or add a condition to an approved rule, you must cancel it so that the remediation task (VUL) is deleted, and the vulnerable items (VIs) move to the Open state.

Before you begin

Role required: sn_vul.vulnerability_admin

About this task

Group rules are reapplied to these VIs. Submit the rule after making the changes so that it goes through the approval process once again.

Procedure

  1. Navigate to All > Vulnerability Response > Administration > Exception Rules.
  2. Open the exception rule that you want to cancel and click Cancel.
  3. In the Cancel Rule dialog box, click Cancel rule.
    The rule moves back to the Draft state and the associated VUL is deleted. The related VIs are reopened, and group rules are applied to the individual VIs.