Skip to content
  • There are no suggestions because the search field is empty.

RSA NetWitness Live Services Advisory: Scheduled Maintenance 2020-02-29

Tags: RSA NetWitness Platform, Service Notifications

Advisory Type

Service


Advisory Content

Summary:

 

Please be advised that RSA NetWitness Live services will undergo required maintenance on Saturday, February 29th from 10:00 PM EST to Sunday March 1st 03:30 AM EST. RSA will be updating the Community Malware Service during this maintenance window. The client applications may not be able to connect to any cloud.netwitness.com services during this time.

 

There will be no changes to any other NetWitness Live Services in this maintenance.

 

Post Upgrade:

 

To improve resiliency, cloud.netwitness.com will no longer resolve to a static IP address (52.224.176.196) and instead will resolve to a dynamic IP address.

 

To validate that your system can connect to the NetWitness Live Malware cloud services post-maintenance: 

  1. Go to ADMIN > Services.
  2. Select a Malware Analysis service and clickpastedImage_1.png> View > Config.
  3. Select the Integration tab; Below RSA Cloud Connection Test and Registration section, click Test Connection to verify a connection is established to cloud.netwitness.com. If your network is using a proxy server, make sure the proxy settings in the Proxy tab are correct.

If you have connection issues, first check: 

  1. Validate that your firewall is configured to allow outbound https access to any host.
  2. Validate there is not a hard-coded entry in /etc/hosts for cloud.netwitness.com. The following hosts should be checked for static routing:
    1. NW Server
    2. ESA (Primary & Secondary)
    3. Malware

For additional details, refer KB Deployment Guide: Network Architecture and Ports

If you continue to have issues, please contact RSA Customer Support.