Create an Accept Rule from Vulnerability Details

The following feature is only available in Tenable FedRAMP Moderate environments.

Required User Role: Administrator

Required Access Group Permissions: Can View

You can create accept rules via the Settings page, or via the Vulnerability Details page.

To create an accept rule via the Vulnerability Details page:

  1. View the Vulnerability Details page.
  2. In the Assets Affected table, select one or more check boxes next to the assets for which you want to create an accept rule.
  3. In the upper-right corner, click the Actions button.

    The actions menu appears.

  4. in the actions menu, click Recast.

    The Recast Rule plane appears.

  5. In the Action section, select Accept.
  6. In the Vulnerability section, confirm the plugin ID populated by Tenable Vulnerability Management.
  7. In the Targets section, confirm the target populated by Tenable Vulnerability Management. For example:

    Note: Tenable Vulnerability Management does not support bulk actions for recast or accept rules. You must select each target individually to populate your list of targets.

    • If you select only some of the assets on the Vulnerability Details page, Tenable Vulnerability Management sets the target to Custom.
  8. (Optional) In the Expires box, set an expiration date for the rule.

    This action is only necessary if you want the rule to age out. By default, the rule applies indefinitely.

  9. (Optional) In the Comments box, type a description of the rule. The text you type in this box is only visible if the rule is modified and has no functional effect.
  10. (Optional) To report the vulnerability as a false positive:
    1. Enable the Report as false positive toggle.

      A Message To Tenable box appears.

    2. In the Message to Tenable box, type a description of the false positive to send to Tenable.
  11. Click Save.

    Tenable Vulnerability Management starts applying the rule to the appropriate vulnerabilities. This process may take some time, depending on the system load and the number of matching vulnerabilities. Tenable Vulnerability Management hides the affected vulnerability on your dashboards.

    Note: To view vulnerabilities hidden from your dashboards, use the Recast & Accept filter.