| Table of Contents |
|---|
Introduction
Prism's The Platform’s Issue Suppression feature allows you to choose which issues or affected instances managed in Prism the platform you'd like to prevent from being reported as open/published/active issues. This feature is useful in a variety of situations, some examples being:
...
| Note |
|---|
IMPORTANT NOTE: Issue Suppression does not work retrospectively and works from the point at which you invoke suppression. Therefore, when you suppress an issue or an affected instance of an issue, Prism the platform will not suppress historic or existing issues, only future issues that are imported. |
...
There are two types of Issue Suppression you can utilise in Prismthe platform:
Issue-Level Suppression - this will suppress an entire issue regardless of the affected instances/hosts for the issue. Any future scans/tests that contain a matching issue will be suppressed. By performing Issue-level suppression, Prism the platform will update the issue's status to "Suppressed" and consider the whole issue as 'Closed'.
Instance-Level Suppression will suppress only an affected instance for an issue - For example, if an issue contains multiple affected instances (e.g hosts), you can choose to suppress only certain instances affected by the issue. Any future scans/tests that contain both a matching issue & instance combination will be suppressed. Prism The platform will consider the issue as 'Open', but the affected instance/host will have their status updated to "Suppressed"
...
For Indefinite Suppression, Prism the platform will automatically apply the "Suppressed" status to future issues or instances without an end date.
For Date-Based Suppression, Prism the platform will automatically apply the "Suppressed" status to future issues or instances until the specified date has passed. After the date has passed, the issue or instance will return to a status of "Published" (for an Issue), or "Vulnerable" (for an instance)
...
In the window, you have options to specify the scope of the suppression:
This Project Only - This will limit the scope of the suppression to the same issues identified within the current Project. Other projects in the platform will not be affected by this suppression action. When you choose this option, a “Suppress until” field will appear
Platform Wide - This will expand the scope of the suppression across the entire platform tenant. Where this issue appears in the current project as well as all other projects, suppression will be applied. When you choose this option, a “Suppress until” field will appear
Optionally, after selecting the scope, the “Suppress until” field will appear where you can choose to set a date in the future for Date-Based Suppression, or leave the date field blank for Indefinite Suppression
Reason - a reason for suppression is mandatory and must be entered here before committing the action to Prismthe platform
Click ‘Submit’ to save the suppression instruction
...
In the window, you have options to specify the scope of the suppression:
This Project Only - This will limit the scope of the suppression to the same issue & instance combination identified within the current Project. All future scans/tests in the current project containing this issue & instance combination will be suppressed. Other projects in the platform will not be affected by this suppression action. When you choose this option, a “Suppress until” field will appear
Platform Wide - This will expand the scope of the suppression across the entire platform tenant. Suppression will be applied wherever this issue & instance combination appears in future tests/scans. When you choose this option, a “Suppress until” field will appear
Optionally, you can choose to set a date in the future for Date-Based Suppression, or leave the date field blank for Indefinite Suppression
Reason - a reason for suppression is mandatory and must be entered here before committing the action to Prismthe platform
Click ‘Submit’ to save the suppression instruction
...
For each suppression instruction committed to Prismthe platform, an entry under the “Issue Rules” will appear that describes the suppression instruction
...