<h2>sn_sec_cmn.ignoreCIClass system property is no longer working</h2><br/><div style="overflow-x:auto"><article><div ><h3 >Issue </h3><section><ul><li>There's a system property named(sn_sec_cmn.ignoreCIClass) which is called in CI lookup rules to ignore the matching against the mentioned CI classes which are not in the inclusion list. But now Vulnerable items - CI matching is happening against the classes which are not in the inclusion list and is impacting the entire matching of VITs.<br /><br /><br /></li></ul></section></div><div ><h3 >Release</h3><section><ul><li>Paris Patch 4</li></ul></section></div><div ><h3 >Cause</h3><section><ul><li>Customer CI Lookup IP address rule.It looks into cmdb_ci_network_adapter and then return the nic.cmdb_ci.<br /></li></ul></section></div><div ><h3 >Resolution</h3><section><ul><li> Modify the IP address lookup rule to pick only CI which is not part of the ignore class (below script). In the latest release of VR, this has been addressed. While auto promoting we will skip CIs which are part of ignore. <br /><br /><br /></li></ul></section></div></article></div>