SecurityInsight settings · Settings > Guards
Vulnerabilities: scope changed
| Key | SI_Guard_VulnConnectorScopeChanged_Enabled |
|---|---|
| Where | Settings > Guards (safety checks) > Vulnerability connector checks |
| Type | On / off |
| Default | Off |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
The safety check that protects open vulnerability records: The scope of the collection changed, so records that dropped out of it were not closed.
When enabled
the check works as described on the Guards page.
When disabled
the step goes on as if the check had not tripped -- records that dropped out of the collection scope are closed like any other absent record.
Risk and how to reverse it
Turning this check off removes a protection: when its condition happens, nothing holds or stops the step and no event is raised. Reversible at once: switch it back on; it applies from the next run.
Requires
Works only while "All guards (safety checks)" is on.
Recommended
Keep the default (off) unless you want this check to hold or stop the step. Change it when: Off by default: only the two brakes stay on (CIs retired by mistake, duplicate vulnerability records) -- this check is a warning you can switch on. Turn it on when you want it to hold or stop the step, and mail, again.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack