RSA NetWitness Lists

RSA NetWitness ListsRSA NetWitness Lists

The following table lists the RSA NetWitness Lists, used by the rules and reports in RSA NetWitness Platform.

Name:
Vendor Update Sites
Description:
List of popular Vendor Update Sites providing updates to endpoints. Traffic from most vendor sites is considered normal and hence can be filtered from capture.

Name:
Administrative Users
Description:
Lists the names of the administrative users.

Name:
Ad Servers
Description:
List of popular Ad sites. Ad services consume a lot of disk space. If the traffic is acceptable, ad servers are a good candidate for filtering.

Name:
Compliance Data
Description:
List of filenames or object names that are important from a compliance perspective.

Name:
Compliance Systems
Description:
List of user-defined watchlist of system IP addresses that are important from a compliance perspective.

Name:
Content Delivery Networks
Description:
List of popular Content Delivery Networks. Most popular content is spread across CDNs. Filter these sites to reduce the amount of "noise" from non-dangerous traffic.

Name:
Local Country
Description: Lists names of the local country.

Name:
News Portals
Description:
List of popular News Portal sites. If you are not worried about these sites, you should filter them from capture.