Using Search Lists

Vulnerability search lists can be assigned to business objects in your account, including option profiles, scan report templates and remediation policy rules. You can add up to 30 search lists per business object, and the search lists added may consist of both static and dynamic lists.

Search lists may be assigned to the following user configurations:

Option Profiles. You manage search lists in an option profile on the Scan tab. Select Custom in the Vulnerability Detection section to add or remove search lists. When the option profile is applied to a scan task, the QIDs in the search list are scanned. Note that you can also exclude certain QIDs from scans by adding one or more search lists to the Exclude section in an option profile.

Report Templates. You manage search lists in a scan report template on the Filter tab. Select Custom in the Selective Vulnerability Reporting section to add or remove search lists. When the report template is used to generate a scan report, the QIDs from the search list are included in the report. Other QIDs are filtered out of the report. Note that you can also exclude certain QIDs from the scan report by adding one or more search lists to the Exclude QIDs section of the report template.

Remediation Policy Rules. You manage search lists in a policy rule under Vulnerability in the Conditions section. The QIDs from the search list are used to trigger automatic ticket creation.

 

To add search lists to a user configuration:

In the user configuration, click the Add Lists button to add one or more search lists. The Select Vulnerability Search Lists pop-up appears. You have these options:

Search List. The search lists already in your account appear on the Search List tab. Select the check box next to each search list you want to add to the configuration. Then click OK.

Search List Library. The search lists in the Library appear on the Search List Library tab. Select the check box next to each search list you want to add to the configuration. Then click Import.

 

To view search list information:

Click ico_info.jpg  to view search list information, including the list of QIDs saved in the list (static) or the search criteria saved in the list (dynamic). You can also see the number of QIDs included in the search list, and other user configurations with the search list assigned.

 

To remove search lists from a user configuration:

Click ico_cancel.jpg to remove a single search list from the user configuration. Optionally, click the Clear All button to remove all search lists from the user configuration.

 

Related Reading

About Search Lists

Importing Search Lists from the Library

Importing Search Lists

Managing Search Lists

Deleting Search Lists