Exclude Devices from Vulnerability Management

Vulnerability Management now supports excluding specific devices from vulnerability reporting.

You can exclude a device directly from its device record or from the Devices tab within any CVE detail view. Excluding a device removes it from all CVE affected device counts across your fleet and stops vulnerability notifications from being sent for that device. Vulnerability detections are still visible on the device record itself.

If a Vulnerability Response Library Item is scoped to the device, it will continue to patch the device even when excluded. You can remove an exclusion at any time to resume monitoring. If a device is deleted from Iru Endpoint, its exclusion is automatically removed.

For more information, see our support article.