SecurityInsight settings · Settings > Guards
Asset metadata: large change
| Key | SI_Guard_AssetPropertiesCollectionChange_Enabled |
|---|---|
| Where | Settings > Guards (safety checks) > CMDB, ServiceNow and asset metadata checks |
| Type | On / off |
| Default | Off |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
The safety check that protects the asset metadata handed to your CMDB and vulnerability system: The full asset metadata collected from one source changed by more than the allowed share since the previous run, which looks like a broken collection rather than a real change, so the previous collection of that source was kept for the hand-off.
When enabled
the check works as described on the Guards page.
When disabled
the step goes on as if the check had not tripped -- a large change of the asset metadata is handed over like any other.
Risk and how to reverse it
Turning this check off removes a protection: when its condition happens, nothing holds or stops the step and no event is raised. Reversible at once: switch it back on; it applies from the next run.
Requires
Works only while "All guards (safety checks)" is on.
Recommended
Keep the default (off) unless you want this check to hold or stop the step. Change it when: Off by default: only the two brakes stay on (CIs retired by mistake, duplicate vulnerability records) -- this check is a warning you can switch on. Turn it on when you want it to hold or stop the step, and mail, again.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack