Perform the following procedure to disable a threat intelligence feed.


  1. On the navigation bar, click Threat Intelligence.
  2. Identify the feed to disable.
  3. Deselect the Enabled check box within that feed panel.
    If you disable a feed, its reports remain on the server and incoming data will be tagged against the locally existing IOCs that it reported. However, when you disable a feed:
    • Reports from these feeds about IOCs will not be downloaded for scanning.

    • For feeds that require data to be sent to them, new binary MD5s from your sensors will not be sent.