Disable a Threat Intelligence Feed

Perform the following procedure to disable a threat intelligence feed.

Procedure

1. On the navigation bar, click Threat Intelligence.
2. Identify the feed to disable.
3. Deselect the Enabled check box within that feed panel.
   If you disable a feed, its reports remain on the server and incoming data will be tagged against the locally existing IOCs that it reported. However, when you disable a feed:

   • Reports from these feeds about IOCs will not be downloaded for scanning.

   • For feeds that require data to be sent to them, new binary MD5s from your sensors will not be sent.