---
title: Manage infrastructure vulnerability status
source: https://docs.newrelic.com/docs/vulnerability-management/infrastructure/manage-vulnerability-status
---

New Relic Security RX can detect vulnerabilities across your infrastructure hosts. While most vulnerabilities need remediation, some might not be applicable to your environment. For example, your internal policies might categorize them as low risk or limited exposure due to how your infrastructure uses the potentially vulnerable component.

For vulnerabilities you're not interested in tracking, you can set the **Status** to **Ignored** so they no longer appear in the UI. Since each vulnerability is tied to one or more hosts, you can:

-   Ignore individual vulnerabilities for a specific host
-   Ignore a vulnerability that appears across multiple hosts

You can always change the status from **Ignored** back to **Affected** if you decide a vulnerability is worth tracking again.

> #### 💡 TIP
>
> Before you ignore a vulnerability, keep in mind that this change prevents other users with account access from seeing that vulnerability.

## Ignore a vulnerability [#ignore-vulnerability]

When you choose to ignore a vulnerability, you'll be prompted to explain the rationale behind the decision. For example, you might say that the vulnerable code is not used on the host. We recommend that when you give this context, you also provide supplemental documentation when possible.

You'll also be prompted to set a duration for the **Ignored** status. Security RX will automatically change it from **Ignored** to **Affected** when the time period expires. If a vulnerability is already **No Longer Detected**, the status will remain no longer detected.

**Ignore a vulnerability for a specific host**

You can manually ignore vulnerabilities for specific hosts. Once you set the status to **Ignored**, we'll exclude this from the summary tiles and vulnerability list by default. Other instances of this vulnerability on other hosts will still keep the **Affected** status.

1.  Go to **[one.newrelic.com](https://one.newrelic.com/) > All capabilities > Infrastructure > (select a host)**
2.  In the left navigation, select **Security**
3.  Click the **Summary** tab
4.  Click the **Vulnerabilities** section
5.  Select the vulnerability you want to ignore. If you don't see it, it might already have the **Ignored** status
6.  Click the **Change to ignored** button
7.  Fill out the form to explain the reasoning behind ignoring this vulnerability, including a time period

**Ignore a vulnerability across multiple hosts**

1.  Go to **[one.newrelic.com](https://one.newrelic.com/) > All capabilities > Security RX > Infrastructure**
2.  Click the **Vulnerabilities** tab. By default, this view filters to vulnerabilities where at least one host is marked **Affected**
3.  Choose the vulnerability you want to ignore
4.  In the **Area of Impact** section, select each host you want to ignore
5.  Click the **Change to ignored** button
6.  Fill out the form to explain the reasoning behind ignoring this vulnerability, including a time period

## Restore ignored vulnerabilities [#restore-ignored]

It's good practice to review ignored vulnerabilities and validate whether they should stay ignored. We recommend reviewing your vulnerabilities every 90 days to ensure you aren't introducing risk into your system.

If you change the status from **Ignored** to **Affected** for a specific host, that reintroduces the vulnerability into default views and counts against this host. Instances of this vulnerability on other hosts remain ignored.

**Remove ignored status for a specific host**

1.  Go to **[one.newrelic.com](https://one.newrelic.com/) > All capabilities > Infrastructure > (select a host)**
2.  In the left navigation, select **Security**
3.  Click the **Summary** tab
4.  Click the **Vulnerabilities** section
5.  Update the filter from **Status = Affected** to **Status = Ignored**. This displays all ignored vulnerabilities
6.  Choose the vulnerability you want to update
7.  Click **Change to affected**
8.  Fill out the form to explain the reasoning behind changing this vulnerability to **Affected**

**Remove ignored status across multiple hosts**

1.  Go to **[one.newrelic.com](https://one.newrelic.com/) > All capabilities > Security RX > Infrastructure**
2.  Click the **Vulnerabilities** tab
3.  From the settings cog, click the **Ignored** checkbox. This adds an ignore column to your vulnerability table
4.  Select a vulnerability with an **Ignored** count greater than 0
5.  Update the filter from **Status = Affected** to **Status = Ignored**
6.  In the **Area of Impact** section, select the hosts you want to mark **Affected**
7.  Click **Change to affected**
8.  Fill out the form to explain the reasoning behind changing this vulnerability to **Affected**

## What's next?

[Set up alerts](https://docs.newrelic.com/docs/vulnerability-management/advanced/set-up-alerts)

Get notified when infrastructure vulnerabilities are detected

[Query security data](https://docs.newrelic.com/docs/vulnerability-management/advanced/query-examples)

Track status changes and remediation metrics with NRQL

[Manage infrastructure vulnerabilities](https://docs.newrelic.com/docs/vulnerability-management/infrastructure/manage-infrastructure-vulnerabilities)

View infrastructure vulnerabilities across your entire organization

[Manage infrastructure vulnerabilities from entities](https://docs.newrelic.com/docs/vulnerability-management/infrastructure/monitor-host-security)

Monitor vulnerabilities for specific hosts