Ignore CI classes

task australia Updated Sep 10, 2026 1 min read ignore-CI-classes.md

To ignore some configuration item (CI) classes, for example Load Balancer [cmdb_ci_lb], when running CI Lookup Rules, set the ignoreCIClass [sn_sec_cmn.ignoreCIClass] system property.

Before you begin

Role required: admin

Note:

The ignoreCIClass system property is available starting with Vulnerability Response v9.0, however, the property functionality is not available on upgrade from any previous version.

If you have upgraded from any Security Operations application, prior to version 9.0, see KB0788209 for instructions on how to enable this functionality.

Procedure

Enter sys_properties.list in the left navigation bar.
Select Enter.
In the Search menu, under Name enter sn_sec_cmn.ignoreCIClass.
In the Value text box, enter the CI classes to exclude in a comma-separated list.

[Omitted image "ignoreCIClass.png"] Alt text: ignoreCI Class system property example.
Select Update.

This list is used by CI Lookup Rules during the next import. Vulnerable items created during import are not associated to a CI of any type listed in the Value field of the sn_sec_cmn.ignoreCIClass system property.

Parent Topic:Create a Vulnerability Response CI lookup rule

48 lines · 2.2 KB Wrap lines

---
title: Ignore CI classes
description: To ignore some configuration item \(CI\) classes, for example Load Balancer \[cmdb\_ci\_lb\], when running CI Lookup Rules, set the ignoreCIClass \[sn\_sec\_cmn.ignoreCIClass\] system property.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/ignore-CI-classes.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Create a Vulnerability Response CI lookup rule, Advanced Vulnerability Response configuration tasks, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Ignore CI classes

To ignore some configuration item \(CI\) classes, for example Load Balancer \[cmdb\_ci\_lb\], when running CI Lookup Rules, set the **ignoreCIClass** \[**sn\_sec\_cmn.ignoreCIClass**\] system property.

## Before you begin

Role required: admin

**Note:**

The **ignoreCIClass** system property is available starting with Vulnerability Response v9.0, however, the property functionality is not available on upgrade from any previous version.

If you have upgraded from any Security Operations application, prior to version 9.0, see [KB0788209](https://support.servicenow.com/kb_view.do?sysparm_article=KB0788209) for instructions on how to enable this functionality.

## Procedure

1. Enter `sys_properties.list` in the left navigation bar.

2. Select **Enter**.

3. In the **Search** menu, under **Name** enter `sn_sec_cmn.ignoreCIClass`.

4. In the **Value** text box, enter the CI classes to exclude in a comma-separated list.

\[Omitted image "ignoreCIClass.png"\] Alt text: ignoreCI Class system property example.

5. Select **Update**.

This list is used by CI Lookup Rules during the next import. Vulnerable items created during import are not associated to a CI of any type listed in the **Value** field of the `sn_sec_cmn.ignoreCIClass` system property.

**Parent Topic:**[Create a Vulnerability Response CI lookup rule](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-ci-identifier-rules.md)