Vulnerabilidade

[Jadiel]

Bom dia,

Quanto tempo levar para o Lansweeper atualizar a base de vulnerabilidade ativos ?, eu tenho trabalhado bastante nas vulnerabilidades encontradas nos software, porem quando entro, mostra que não houve alteração e continua mostrando as mesma notificação de vulnerabilidade ativo.

Segue o print da tela que estou me referindo.

[DavidPK]

Hello there! 

Our tech support team should be able to assist you with this.  Please open a ticket in our support portal.

Make sure to add screenshots and the GatherLogs output file so our SME's can start investigating the issue straight away. 

Using the GatherLogs tool.

[MariaOrellana]

Hi @Jadiel 

Thanks for your question! There are two timing aspects to keep in mind when it comes to vulnerability updates in Lansweeper:

1. Vulnerability definition updates
We connect to our provider (VulnCheck) daily, so vulnerability definitions are refreshed every day.

2. Matching to assets
How these vulnerabilities appear on assets depends on two scenarios:

• If the asset is rescanned and changes are detected (such as OS or software updates), the risk data is refreshed immediately after the sync (typically within 5–10 minutes).

• If the asset is not rescanned and remains unchanged, but a new vulnerability is published for an existing OS or software version, Lansweeper performs a weekly background re-match to apply those updates. This weekly cycle helps balance accuracy and system performance.

If you are still seeing outdated risk information, we recommend rescanning the affected assets to ensure the latest data is reflected.

Let us know if you need help triggering a rescan or interpreting any specific vulnerability results!

Best regards,

[Jadiel]

Good morning, Maria Orellana.

I understand how the Lansweeper update cycle works; however, I’ve noticed that this process is not properly reflecting the assets whose vulnerabilities have already been addressed and resolved.

I’m attaching a screenshot of the screen where these asset vulnerabilities are still being shown. The ones marked with the orange circle (highlighted by me) refer to assets that have already been corrected. Despite this, the notifications persist, even though the vulnerabilities no longer exist on those assets.

I kindly ask you to review this issue. Please let me know if you need any additional information.