000034683 - How to Turn off Threat Scoring to enhance system performance in RSA Web Threat Detection 5.0

Document created by RSA Customer Support Employee on Jan 26, 2017Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000034683
Applies ToRSA Product Set: Web Threat Detection
RSA Product/Service Type: Forensics
RSA Version/Condition: 5.0
Platform: Linux
O/S Version: Red Hat Enterprise Linux 6.x
IssueA customer may ask how to turn off the threat scoring to enhance performance.  
ResolutionTurn off scoring
Method 1   Disable Scoring  (Recommended to do this first, and evaluate for performance benefit)
Go to  SilverCat -> SilverSurfer;  see sleuth*ThreatScores   Enabled: ON
Edit the Silversurfer  and go through each sleuth*ThreatScores   and uncheck  ‘enabled:’
Save and push the change
Method 2-  Delete the Pools  Recommended to perform after Method 1 for additional performance benefit
Note that the scoring pools will still exist so as an alternative or additional way to stop scoring you can do the above and also delete the Pools, see screenshot attached.
   WARNING  Except  DO NOT TURN OFF the Early Pool this is required for GUID User Mapping.
Note: Either method 1 or 2 alone would stop scoring.