|Applies To||RSA Product Set: NetWitness Endpoint formerly ECAT|
RSA Version/Condition: 4.4.x
|Issue||The NetWitness Endpoint RSA Live Subscribed Feeds download fails with "Could not find any resource matching Url."|
Observe this error log in the following locations:
|Cause||The RSA Live account configured in NWE UI, Configure > Monitoring and External Components > RSA Live, only has Basic subscription access.|
A Basic subscription Live account, only has permission to download the following feeds: Malware Domain List, Malware Domains, and Malware IP List.
The other 11 Live feeds (FirstWatch*, FraudAction*, Zeus*) are only available to RSA Live accounts that also have the Enhanced subscription.
|Resolution||The Basic and Enhanced subscriptions are now available free to all NetWitness customers with a valid NetWitness maintenance contract.|
Contact RSA Customer Support to add the Enhanced subscription to the RSA Live account that is configured in NWE UI, Configure > Monitoring and External Components > RSA Live
Provide RSA Customer Support the RSA Live Username to check.
How can I contact Customer Support for issues or questions relating to RSA Link?