000026705 - What is the expected availability of individual RSA NetWitness Spectrum Cloud services?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000026705
Applies ToRSA Security Analytics
RSA NetWitness NextGen
RSA NetWitness Spectrum
RSA NetWitness Spectrum 1.0.5.0 and above
IssueWhat is the expected availability of individual RSA NetWitness Spectrum Cloud services?
What is the expected availability of the Spectrum Cloud?
ResolutionThe Community analysis component of RSA NetWitness Spectrum is based on a combination of private and public intelligence sources delivered via the RSA NetWitness Live service specifically for Spectrum. As Spectrum analyzes files and delivery mechanisms, it reaches out to the security community programmatically via the Live cloud-based service to determine what is known about the file, URL and servers involved in the network session. In addition, Spectrum leverages a cloud-based sandbox by default for the Sandbox analysis component which is also delivered via the RSA NetWitness Live service specifically for Spectrum.

? For the private sources such as Bit9, the service providers are obligated to deliver 99.9% availability and uptime.

? For the public sources such as Google, Robtex and Whois, the services are no longer suppported.

? For the cloud-based sandbox, Threat GRID is obligated to deliver 99.9% availability and uptime.

  Please refer to the following table for the more information.

 

Service Name

Public or
Private source?

Information sent to the Cloud

Service Level

Authenticode

Private

Actual file

99.9% availability and uptime

Bit9

Private

Server?s URL

99.9% availability and uptime

NSRL

Private

MD5 Hash of file

99.9% availability and uptime

Robtex

Public

Server?s Domain Name

Unsupported

ThreatGRID

Private

Actual file

99.9% availability and uptime

UrlVoid

Public

URL targeted in network session (Server's URL)

Unsupported

URIBL

Public

URL and Domain Name from network session

Unsupported

VirusTotal

Private

MD5 Hash of file

Best effort basis

Google

Public

URL targeted in network session (Server's URL)

Unsupported

Whois

Private

Domain Name from network session

99.9% availability and uptime



 

 

 

 

 

 

 

RSA NetWitness will use commercial best efforts to provide customers with 99.9% service availability relating to Live - Spectrum. At times, it is necessary to perform routine maintenance on the servers to guarantee optimal performance of the Service. Such maintenance often requires taking servers off-line and is typically performed during off-peak hours.

? We reserve the right to plan a scheduled outage with forty-eight (48) hours advance notice. We will use commercial best efforts to schedule these outages at non-peak hours and limit their occurrence to strictly necessary upgrades and required maintenance.

? Scheduled outages are communicated via e-mail to the designated administrator of each customer.

? It is the responsibility of the administrators to notify all persons within their organizations of scheduled outages.

Legacy Article IDa58882

Attachments

    Outcomes