How are tickets closed?

There are several ways a ticket can be closed:

• The most common scenario is that you remediate the vulnerability and a subsequent scan confirms that the issue has been fixed. When this happens, the ticket is automatically closed.

• A ticket can also be closed with the status “Fixed” if the host has not been scanned for a defined number of days and has been marked as inactive through Asset Lifecycle Management. Read more about how lifecycle management works.

• You can use the status “Will not fix” if you are certain that a vulnerability is a false positive, or if you have decided to formally accept the risk. In that case, you can ignore the vulnerability. Read more about how to ignore a vulnerability.