Hi Jonathan
Do you have configuration parameter 1012 - Consider Rule ID also for mitigation assignment set to YES?
If set to you you can choose which rule violations you apply the control to. You may have different controls depending on the rule. Provides more flexibility depending on your needs.
If it's no, it just might need the asterisk as that is how it is stored in the table
Regards
Colleen