Hi,
Unfortunately we have a few obsolete Windows Servers without Extended Security Updates in our environment. These appear in Remediation Projects as requiring solutions that are not available to us (because we don’t have the ESU), so we’d like to suppress any such solutions published after the expiry date of the normal extended support. These are cluttering up the existing projects with solutions that can’t be applied and making it harder for our sys admins to work through.
However, I can’t see a way to do this:
- I have moved the obsolete servers to a separate project, but the projects still contain the solutions that we can’t action.
- I still want to see the servers in the project in case they are missing anything else.
- Excluding the related vulns for the servers would take forever and be an ongoing task.
- Querying solution titles etc isn’t possible, so I can’t amend the query that the remediation project is using to look for specific titles.
- Removing the servers isn’t going to happen anytime soon!
- I’m not worried about losing some visibility of these as we track them anyway.
Is there a way I can do this that isn’t going to be as laborious as i think it could be?
Thanks