In the WebInspect scan visualization, there two status bars, "Verified" and "Reflection Audited". These never show any activity other than something similar to "Verified: 0 of 200".
We typically use the "Standard" scan policy with WebInspect. We are using version 19.2.
How are these checks enabled so that the Persistent and Reflected XSS are retested and audited?