The Threat Management Preferences page is where you control email alert notifications of new vulnerabilities and other features of the Threat and Vulnerability Manager. You can choose the recipients and email templates for threat management alerts. Alerts are optionally sent after each vulnerability scan and when updates are received from vulnerability feeds. Tickets can be automatically created for newly updated vulnerabilities. Threat Management Preferences is also where you manage groupings and dynamic groups of entities (entities) based on their shared properties. You can set the Threat Management Preferences only if you have the Threats and Vulnerabilities View and Manage permissions.
PREFERENCE | DESCRIPTION | |
Send notification when a vulnerability matches my environment | To Recipients | Select a team of users to receive alerts by email. |
Using Email Template | Choose No Email, or select an alert template (such as Threats Advisory Alerts). | |
Vulnerabilities from Scanners | Include vulnerabilities from scanners in email notifications. | |
Vulnerabilities from Feeds | Include vulnerabilities from feeds in email notifications. | |
When a vulnerability is assigned to a user, send notification using: | Email Template | Choose No Email, or select an alert template (such as Threats Advisory Alerts). |
When vulnerabilities are updated: | Automatically create tickets | Check the box to automatically create tickets |
Create tickets only if no patch is available for the affected entity | Check the box to create a ticket if a patch is unavailable for the affected entity. | |
CVSS Score >= | Create a ticket when vulnerabilities have a CVSS score greater or equal to a specified value. | |
Acknowledge the vulnerability when tickets are automatically created | Check the box to automatically acknowledge vulnerabilities when tickets are created. | |
and assign the vulnerability to | Select a user the vulnerability will be assigned to. | |
Ticket default due dates based onvulnerability risk level | High | Default: 10 days after today |
Medium | Default: 30 days after today | |
Low | Default: 90 days after today | |
Ticket Reminders | Send reminder to owners | Check to send a reminder to ticket owners. |
After | Specify the percentage of ticket timespan to have elapsed before sending reminder. Default is 50%. | |
Using Email Template | Choose No Email, or select an alert template (such as Threats Advisory Alerts). | |
Send a notification to the vulnerability owner when all its tickets are closed | For Vulnerability severity level | Choose All, High-only, Medium and High, or None. |
Using E-mail Template | Choose No Email, or select an alert template (such as Threats Advisory Alerts). |