Skip to content
Create a Vulnerability Response CI lookup rule › Advanced Vulnerability Response configuration tasks › Vulnerability Response implementation › Vulnerability Response › Unified Security Exposure Management › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Ignore CI classes

To ignore some configuration item (CI) classes, for example Load Balancer [cmdb_ci_lb], when running CI Lookup Rules, set the ignoreCIClass [sn_sec_cmn.ignoreCIClass] system property.

Before you begin

Role required: admin

Note:

The ignoreCIClass system property is available starting with Vulnerability Response v9.0, however, the property functionality is not available on upgrade from any previous version.

If you have upgraded from any Security Operations application, prior to version 9.0, see KB0788209 for instructions on how to enable this functionality.

Procedure

  1. Enter sys_properties.list in the left navigation bar.

  2. Select Enter.

  3. In the Search menu, under Name enter sn_sec_cmn.ignoreCIClass.

  4. In the Value text box, enter the CI classes to exclude in a comma-separated list.

Image omitted: ignoreCIClass.png
ignoreCI Class system property example.

  1. Select Update.

    This list is used by CI Lookup Rules during the next import. Vulnerable items created during import are not associated to a CI of any type listed in the Value field of the sn_sec_cmn.ignoreCIClass system property.

Parent Topic:Create a Vulnerability Response CI lookup rule