Preventing X-Force Data from Downloading Locally
JSA downloads approximately 30 MB of IP reputation data per day. To stop JSA from downloading the X-Force data to your local system, disable the X-Force Threat Intelligence feed.
Before you disable the X-Force feed, ensure that the X-Force rules are disabled, and that you are not using X-Force functions in saved searches.
After the X-Force Threat Intelligence feed is disabled, the X-Force content is still visible in JSA, but you cannot use the X-Force rules or add X-Force functions to AQL searches.
On the navigation menu (
), click Admin.In the System Configuration section, click System Settings.
Select No in the Enable X-Force Threat Intelligence Feed field.
Deploy the system setting changes to receive the data from the X-Force servers.