You can customize your security policy to exclude certain advisories or minions if needed. Exemptions give you the flexibility to balance security compliance against exceptions for your organization’s unique needs. You can customize security policies to exempt certain minions and/or advisories from remediation if needed.
Adding exemptions
To add an exemption:
- In the Vulnerability workspace, click a policy.
Clicking a policy opens the selected policy’s dashboard, which also includes the latest assessment results.
- In the policy dashboard, click the checkbox next to all advisories you want to exempt from remediation, and click Add exemption.
- In the confirmation dialog, enter the reason for exemption, such as any mitigations in place, and click Add exemption.
Adding exemptions by minion
To exempt a specific node from remediation:
- In the Vulnerability workspace, click a policy.
Clicking a policy opens the selected policy’s dashboard, which also includes the latest assessment results.
- In the policy dashboard, go to the Minions tab.
- Click the checkbox next to the minions you want to exempt from remediation.
- Click Add exemption.
- Enter the reason for exemption and click Add exemption to confirm. You can always remove the exemptions later if needed.
Exempted items will not be remediated. If a remediation runs against a policy that includes the exempted item, the remediation is skipped for that item.
Removing an exemption
To remove an exemption:
- In the Vulnerability workspace, click a policy.
Clicking a policy opens the selected policy’s dashboard.
- In the policy dashboard, go to the Exemptions tab.
- Scroll up and down the page to view a list of all exemptions. Each exemption includes the exemption reason, and IDs of all advisories and minions the exemption applies to.
If a column header includes a filter icon , you can filter the results by that column type. Click the icon and select a filter option from the menu or type the text you want to filter by. You can remove active filters by clicking Clear Filters.
- Click Remove exemption.
- In the confirmation dialog, click Remove exemption.