File Reputation Server provides analysts the opportunity to view reputation status of files. By default, File Reputation is enabled in Additional Live Services section.
If Context Hub service is configured, File Reputation Server is automatically added as data source for Context Hub.
- Context Hub is enabled and the service is available in (Admin) > Services view of NetWitness Platform.
- RSA Live Account is available.
By default, File Reputation is enabled in Additional Live Services section. Before setting up File Reputation data source, make sure that you have signed in to your Live account with your Live Account Credentials and Context Hub is enabled. File Reputation is automatically added as a data source for context hub.
For information about configuring Live Account and Live Services, see the Configure Live Services Settings topic in the System Configuration Guide.
For information about configuring Context Hub service, see the Step 1. Add the Context Hub Service topic in the Context Hub Configuration Guide.
Enable or Disable File Reputation Data Source
To enable or disable Live Connect data source for Context Hub:
- Go to (Admin) > System.
- In the left navigation pane, select Live Services.
In the Additional Live Services section, enable File Reputation.
- Click Apply.
File Reputation Server data source is enabled for Context Hub service.
- To verify, go to the Data Sources tab and view the available sources.
File Reputation source must be added to the list of available sources and the Enabled field must be a solid green circle ().
To disable File Reputation data source, disable File Reputation in Additional Live Services panel and click Apply.
File Reputation data source is disabled for Context Hub service.
Edit File Reputation Server Data Source Settings
To edit File Reputation Server data source for Context Hub:
- Select (Admin) > Services.
The Services view is displayed.
- In the Services panel, select the Context Hub service, and > View > Config.
The Services Config view is displayed.
The Edit Data Source dialog is displayed.
- Edit the required fields:
|Max. Concurrent Queries||You can configure the maximum number of concurrent queries defined by the Context Hub service to be run against the configured data sources. The default value is 25.|
To edit the Live Connection and Proxy settings, do the following:
To edit the Live Connection settings, see the Live Services Configuration Panel topic in the System Configuration Guide.
To edit the proxy settings, see the HTTP Proxy Settings Panel topic in the System Configuration Guide.
Click Test Connection to test the connection between Context Hub and the data source.
Click Save to save the settings.
Table of Contents > Configure File Reputation Server Data Source