How do you separate pre-production assets from production in IVM? We have a scan engine that sit on pre-prod VLAN and yet it discovers assets in production.
Sounds like a firewall issue more than anything? Asset discovery goes through ICMP traffic if I am not mistaken. Log into your scan engine VM and simply ping an already R7 discovered asset.