EDR: Why Is The Reputation Threat Feed Enabled But The Toggle Greyed Out To Disable The Feed?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Why is the Reputation Threat Feed enabled but the toggle greyed out to disable the feed?

Environment

• EDR Server: Version 6.x and Higher

Resolution

The toggle to enable/disable the Reputation Threat feed is grayed out as this feed is set to be enabled at all times.

Additional Information

• The Reputation Threat feed is a customer-specific feed that will only alert based on the data in the environment.
• The only way to "disable" this feed is to not share binary data.