Open

You will learn

How to customize ThreadFix severity mappings as well as create and edit scanner result suppression rules.

Prerequisites

Audience: IT Professional, or End User
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A

ThreadFix has a set of predefined mappings from scanner severities to ThreadFix severities. Users can edit any ThreadFix severity mapping on the Customize Scanner Severities page.

ThreadFix Severity Mappings

1. To customize ThreadFix Severity Mappings first expand the Application menu on the Navigation sidebar. Click to expand the Customize sub-menu and select Scanner Severities. The page defaults to the ThreadFix Severity Mappings tab and initially displays a list of supported scanners. Next to each scanner is an arrow toggle button. There are Expand All and Collapse All buttons that will open or close the toggled view for all scanners.
   
   

2. Click the arrow next to a chosen scanner to see the predefined ThreadFix mappings.
   
   

   Open

   

    

3. After opening the predefined mapping for the chosen scanner (in this example, Fortify SCA was chosen, note its Generic Severity level), select the Generic Severity from the drop-down menus to map to its associated Scanner Severity.
   
   

   
   Here, the administrator has decided to remap Fortify SCA’s Code Quality severity to a ThreadFix Info level.
   
   

    

4. Users can remap multiple scanner severities at the same time. When finished remapping scanner severities, click the Update button. A success message with the number of updated scanner severities, along with a note saying that ThreadFix is updating all vulnerabilities in the background will display.

Exclude Severities

In addition to remapping scanner severities, users can exclude them from being processed at all, to save resources. E.g., If a user does not want Low nor Note findings from Contrast to be saved into the ThreadFix database and processed, exclude them, as shown below. In the following example, Low and Note finding data from Contrast will not be added to the ThreadFix database, saving resources.

Suppress Scanner Results

From the Suppress Scanner Results tab users can choose to create rules that suppress certain scanner results. This differs from exclusions, shown above, in that the findings are ingested & processed by ThreadFix, but they're simply not shown nor counted.

1. From the Customize Scanner Severities page, click on the Suppress Scanner Results tab. In the following example, the user has not yet created any rules.
   
   

2. Click the Create New Rule button. This will bring up a modal dialog with dropdowns that allows choosing the scanner and level of severity to suppress. Click the Create Filter button. The dialog will close and a success message will display. All Info and Code Quality level vulnerabilities from Fortify SCA are now suppressed.
   
   

    

3. To edit or remove the rule, click the Edit/Delete button. This brings up a modal dialog which allows the user to change the level of severity to suppress, or delete the rule entirely. Editing the rule and clicking Save Edits results in a success message.
   
   

4. When choosing to delete the rule, a browser dialog will prompt asking if the user is certain they want to delete the rule. Click OK, and a success message will appear.
   
   

Table of Contents