Wondering if anyone might be able to help me get this straightened out. I've used Azure Policy and Security Center without issue for a few years now, but only recently has this problem began to occur.
It seems Policy is not identifying that I have the Qualys Vulnerability Assessment Solution installed on my Virtual Machines. It has also failed to identify that I have my storage accounts restricted using virtual network rules.
I've double- and triple-checked the Scope (I only have one subscription that I'm managing) and can see the Qualys agent is installed on all of the machines, but Azure Policy is failing to detect Qualys for whatever reason. It also fails to detect that my storage accounts are restricted using virtual network rules (both of these were previously showing in Security Center as compliant and have only recently failed to identify).
Also, I have a couple of vulnerabilities that have been addressed by other means that I have tried disabling via the Disable rule (preview) that fail to disappear after disabling. It is quite frustrating. I know that things in preview can fail to work correctly (hence the preview), but it was working before.
I plan on filing a ticket with Azure Support today. Has anyone else noticed problems like this?
