000034531 - What about Profile Timeline in RSA Web Threat Detection, CProfileUpdater and Cassandra as part of version 6.1 upgrade?

Document created by RSA Customer Support Employee on Apr 3, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000034531
Applies ToRSA Product Set: Web Threat Detection
RSA Product/Service Type: Mitigator
RSA Version/Condition: 5.1
Platform: Linux
 
IssueCustomers may ask about the Cassandra Database and the CProfileUpdater as it relates to the Profile Timeline feature.  
What are the advantages of using this Profile Timeline 
Is this required to run with WTD?
How does this get installed?
Currently our environment does NOT have the Cassandra database installed. Is this a requirement for the next Release (6.1) as an upgrade?
Resolution

The Profile Timeline is an optional feature that requres the CProfileUpdater service and that is used to extract session information,
store it in the Cassandra database and display the Profile Timeline in the Forensics User Interface.
This feature will allow Analysts to better track the beginning and end of a session for a particular IP or User.
In the installation guide, the CProfileUpdater, which installs Cassandra, is within the Optional-dependencies RPM.  This can be done separately after the rpm install of the main WTD  package.   It also appears in that order in the RSA Web Threat Detection Installation and Upgrade Guide. Please see page 36. This Guide is available on the RSA Link portal at https://community.rsa.com 
Please Note:  Oracle Java JRE or JDK 8 (for version 6.1) and the Java Policy files are required for this feature. 

Attachments

    Outcomes