Preventing X-Force Data from Downloading Locally
JSA downloads approximately 30 MB of IP reputation data per day. To stop JSA from downloading the X-Force data to your local system, disable the X-Force Threat Intelligence feed.
Before you disable the X-Force feed, ensure that the X-Force rules are disabled, and that you are not using X-Force functions in saved searches.
After the X-Force Threat Intelligence feed is disabled, the X-Force content is still visible in JSA, but you cannot use the X-Force rules or add X-Force functions to AQL searches.
The Internet Threat Information Center widget on the Threat and Security Monitoring dashboard does not require the X-Force Threat Intelligence feed to be enabled. To show daily threat levels and advisories from X-Force, the widget uses an embedded RSS feed from X-Force, and requires only that JSA has an internet connection.
- On the navigation menu (), click Admin to open the admin tab.
- In the System Configuration section, click System Settings.
- Select No in the Enable X-Force Threat Intelligence Feed field.
Deploy the system setting changes to receive the data from the X-Force servers.