000033730 - Update on Available RSA ECAT Live Feed Subscriptions

Document created by RSA Customer Support Employee on Sep 21, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000033730
Applies ToRSA Product Set: ECAT
RSA Product/Service Type: ECAT
RSA Version/Condition: All versions
Platform: Windows
O/S Version: Server 2012 R2
Product Name: RSA NetWitness, RSA Live
Product Description: Endpoint
IssueThis Knowledge Base article is to provide an update on:
  • The available Subscription levels for RSA ECAT Live feeds.
  • Status of Feeds that are no longer maintained (Discontinued).
TasksWhen setting up a subscription to RSA ECAT Live Feed, there are 3 subscription levels to choose from;
  • Basic
  • Enhanced
  • Premium
Which one to select?
ResolutionYou can select the Enhanced Level.
As of Q4 2015, the Basic and Enhanced subscriptions have been consolidated into the Enhanced level.
The Premium level is no longer available. If needed, contact your RSA Sales Representative on how to obtain the premium level.
NotesThe following feeds that are no longer updated (Discontinued in NetWitness Logs and Packets):
RSA FirstWatch Exploit IPs
RSA FirstWatch Insider Threat Domains
RSA FirstWatch Insider Threat IPs
Zeus Domain Tracker
Zeus Tracker

For more information and a brief description of the available feeds, you can consult the RSA NetWitness Endpoint 4.2 (ECAT) User Guide.
starting on page 219.