You must have specific permissions to perform this function. For more information, speak to the Secure Configuration Manager administrator.
When viewing an assessment report for a policy template run, you can create exceptions for the endpoints, groups of endpoints, and security checks in the report. The Web console can then regenerate the report to apply the exceptions, if the exception does not need to be approved. The updated report shows Applied in the Exceptions column in Reports > Assessment Reports.
NOTE:You can also create exceptions without running a policy template against the desired endpoints.
For more information, see the NetIQ Secure Configuration Manager documentation.
To create an exception from an assessment report:
Open the assessment report for the policy template for which you want to make the exception.
(Conditional) To make an exception based on a security check, select the Security Checks tab.
The Create exception wizard prompts you later to specify the endpoints or groups that you want to associate with the selected security checks.
(Conditional) To make an exception based on an endpoint or group, select the Endpoints tab.
The Create exception wizard prompts you later to specify the security checks that you want to associate with the selected endpoints or groups.
Select the security checks or endpoints that you want to except, then click Create exception.
(Conditional) If you selected security checks in Step 4, specify the endpoints that you want to except from the security check results.
(Conditional) If you selected endpoints or groups in Step 4, specify the security checks whose results you want to exclude from the report.
Click Next.
Specify the Properties of the exception.
(Optional) To create a custom reason, click Add new reason.
You should also enter a Description of the reason so that other users can understand the reason’s purpose.
Click Enable to activate the exception.
(Optional) To set a time limit on the exception, specify start and end dates.
If you do not specify a value for End date, the exception never expires.
Click Create.
(Optional) Create another exception.
To apply the exceptions, click ... > Apply exceptions.
NOTE:In some organizations, exceptions must be approved before they can go into effect in an assessment report.
To view the report with exceptions applied, return to Reports > Assessment Reports and open the report, which should now say Applied in the Exceptions column.
You can also edit the exception within the report.