Article Number
000033047
Applies To
RSA Product Set: Security Analytics
RSA Product/Service Type: Malware Analysis, Security Analytics UI
RSA Version/Condition: 10.6.0.0
Platform: CentOS
O/S Version: EL6
RSA Product/Service Type: Malware Analysis, Security Analytics UI
RSA Version/Condition: 10.6.0.0
Platform: CentOS
O/S Version: EL6
Issue
When disabling or enabling Indicators of Compromise (IOC) in Malware Analysis, a refresh browser command is necessary before the command is followed.
When the DISABLE ALL button is clicked, the error message "Indicator(s) of Compromise failed to be disabled." appears, as shown below.
Image description
The /var/lib/netwitness/uax/logs/sa.log file also reports the following error:
A similar error is seen when clicking the ENABLE ALL button.
When the DISABLE ALL button is clicked, the error message "Indicator(s) of Compromise failed to be disabled." appears, as shown below.
Image descriptionThe /var/lib/netwitness/uax/logs/sa.log file also reports the following error:
2015-10-12 07:32:12,551 [qtp684874119-17324] ERROR com.rsa.smc.sa.admin.web.controller.ajax.device.AdminDevicesConfigMalwareController - java.util.concurrent.TimeoutException: Timeout waiting for task.
A similar error is seen when clicking the ENABLE ALL button.
Resolution
This issue has been addressed in Security Analytics 10.6.0.1.
Workaround
Use the browser refresh button to see the updated IOC list.
In this article
