Skyline ignoring updates

[SCrlove]

Hi All,

On my latest report I'm getting findings based around the latest security patches being missing but they've already been applied.

For example, on vCenter, Skyline shows a previous build:

Finding Type    Source    Object ID    Object Name    Object Type    BUILD    VERSION

ExecutionSecurityIssuesREQ4919RuleFinding    10.x.x.100    055E841A-6623-4383-826A-4BC4D12E95DD    055E841A-6623-4383-826A-4BC4D12E95DD    ServiceInstance    8803875    6.0.0

Reality shows:

Current version details

Vendor    VMware, Inc.

Appliance name    VMware vCenter Server Appliance

Update version    6.0.0.30800 Build Number 9448190

Description    vCenter Server with an embedded Platform Services Controller

Release date    August 14, 2018

On the ESXi side, Skyline shows:

Finding Type    Source    Object ID    Object Name    Object Type    BUILD    HOST_VERSION

ExecutionSecurityIssuesREQ4920RuleFinding    10.x.x.100    host-16    10.x.x.13    HostSystem    9239799    6.0.0

ExecutionSecurityIssuesREQ4920RuleFinding    10.x.x.100    host-31    10.x.x.10    HostSystem    8934903    6.0.0

ExecutionSecurityIssuesREQ4920RuleFinding    10.x.x.100    host-12    10.x.x.12    HostSystem    9239799    6.0.0

ExecutionSecurityIssuesREQ4920RuleFinding    10.x.x.100    host-9    10.x.x.11    HostSystem    9239799    6.0.0

Realty shows:

VMHost     Version     Build

10.x.x.12 6.0.0   9313334

10.x.x.13 6.0.0   9313334

10.x.x.10 6.0.0   9313334

10.x.x.11 6.0.0   9313334

Is the Skyline appliance supposed to notice applied updates automatically?

[ashwin_prakash]

Hi,

Welcome to communities,

Thank you for sharing all the details. We would require the name of the Company, So that we could check the rule server and the finding that is recommended to you and take necessary action to correct the rule which has been applied.

I would send you a personal message where you could share the details to us.

[SCrlove]

While getting the info for you I noticed there was a problem with the vCenter endpoint.

The logs showed the password had expired and it couldn't poll.

Shouldn't Skyline let you know there is an issue with the endpoints either by an alert or something in the reports?

[ashwin_prakash · Accepted solution]

Thank you for sharing all the required details, We have raised a request to update the rule server.

Regarding the expired password for vCenter server, I would like to inform you that the rule integration process is still in progress. Not all the rules are active, since which you might see few of the errors missed on the reports.

Thank you for providing a feedback on the password expiry, We would try to have this integrated and updated on the rule server in the future.

You should find the updated OSR post next week.

If there is any clarification required, we would contact you back over the phone or communities.