Article Number
000001568
Applies To
RSA Product Set: NetWitness Endpoint
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 4.4.0.6
Platform: Windows
Issue
[FLOATING CODE] as seen in tracking or summary data/scan data that is not module-associated is being whitelisted with other module code, which is incorrect behavior in the UI.
In order to see this issue, a gold image needs to be selected for whitelisting purposes so the associated modules are automatically whitelisted. This must also be set for automatic bias status assignment in the UI to see this in effect.
Cause
This is a bug that incorrectly sets both whitelisted floating code associated to modules AND unassociated floating code as whitelisted. Associated floating code should be whitelisted, unassociated [FLOATING CODE] should be ignored for whitelisting purposes.
This currently applies to gold images.
Resolution
The resolution to this issue is to upgrade to 4.4.0.7, where the code fix is currently implemented.
Notes
There is no way to remove the whitelisting from the FLOATING CODE without removing gold image whitelisting as well.
