How do I include or exclude a specific vulnerability in a scan profile?
To include or exclude specific vulnerabilities, you will need to choose the appropriate vulnerability tests in the scan profile.
Good to know:
- The "Network scan - standard (recommended)" offers solid vulnerability coverage right from the start and requires no additional configuration.
- Only the specific vulnerability test will be used when adding a test under include.
- You don't need to change any other settings, except for the ones mentioned, to include or exclude a specific test.
- Most tests have dependencies; they will be automatically included when customizing your profile.
- Log in to Security Center.
- In the main navigation bar, hover over Assessments.
- From the dropdown menu that appears, select Profiles.
- Click +Create scan profile.
- Select Network vulnerability (network scanning) or Web (web application scanning), depending on the type of scan you want to run.
- Select which vulnerabilities to include or exclude.
Include specific vulnerability tests:
To scan for specific vulnerabilities, you can search by category name, vulnerability name, or HID under the Include headline. This allows you to customize your scan and focus on specific areas of concern.
Exclude specific vulnerability tests:
To exclude specific vulnerabilities, disabling them in the scan, you can search by category name, vulnerability name, or HID under the Exclude headline. - Once you have done your selection, click Save (or Submit).
- The profile is now ready to be used, done!