Only scan vulnerabilities for which a system hotfix exists

[McBru]

Dear all,

I was wondering if there is a possibility to only scan the vulnerabiilties for which a system or application hotfix (or configuration change) exists.

Indeed, for several vulnerabiilties, the reports tells us: « McAfeeis currently unaware of a vendor supplied patch or update ».

Regards,

Bruno.

[cgrim]

Hi Bruno,

Running any of the Patches/Hoftixes categories would have the desired effect.  But to your specific quesion no such functionality currently exists. 

If you'd like to submit a Product Enhancement Request you can do so here:

https://mcafee.acceptondemand.com/index.jsp?path=/login-external.jsp

I hope that helps!
Cathy

[cgrim]

Hi Bruno,

I take that back!

Creating a Vulnerability Set:

Scans / Vuln Sets

and using the Rule Condition "Patch Availability" equals "Patch Available"

it will filter out all the "McAfee in currently unaware of a vendor suppliend patch or update..." Scripts.

I hope that helps!

Cathy

[feeeds]

Would I be able to use the same logic when generating a report ?  When I edited my custom reports I can ref the vuln set, but not sure how that will work out.