000033047 - Attempting to enable or disable all Indicators of Compromise (IOC) is not functioning properly in RSA Security Analytics 10.6

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000033047
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Malware Analysis, Security Analytics UI
RSA Version/Condition: 10.6.0.0
Platform: CentOS
O/S Version: EL6
IssueWhen disabling or enabling Indicators of Compromise (IOC) in Malware Analysis, a refresh browser command is necessary before the command is followed.
When the DISABLE ALL button is clicked, the error message "Indicator(s) of Compromise failed to be disabled." appears, as shown below.
User-added image

The /var/lib/netwitness/uax/logs/sa.log file also reports the following error:
 
2015-10-12 07:32:12,551 [qtp684874119-17324] ERROR com.rsa.smc.sa.admin.web.controller.ajax.device.AdminDevicesConfigMalwareController - java.util.concurrent.TimeoutException: Timeout waiting for task.

A similar error is seen when clicking the ENABLE ALL button.
ResolutionThis issue has been addressed in Security Analytics 10.6.0.1.
WorkaroundUse the browser refresh button to see the updated IOC list.

Attachments

    Outcomes