Symantec Intelligence Services license expired

Products

• Security Analytics

Issue/Introduction

If you log in to Security Analytics and notice that the Symantec Intelligence Services license subscription is expired (or about to expire), the license will need to be renewed.

What happens when the Intelligence Services license does expire?  How does that affect the operation of Security Analytics? 

 

Environment

Any version of Security Analytics with an Intelligence Services subscription.

Resolution

If the subscription has expired, any results produced by the Intelligence Services providers will not be available.  This includes Intelligence Threat reports or anything results and workflows produced by Rules. Rules are disabled and will need to be enabled again, once the license is renewed.

These can be found under the "Threat Intel" category on the reports page.  

All other reports will continue to function without any disruption of service.  If the appliance has any active rules using the File Reputation Service and Web Reputation Service providers, they should be disabled until the subscription is renewed. 

Under the old licensing methods, if the subscription has been renewed, resubmitting your 16-digit license key in the License Details dialog will update the expiration date after the appliance reboots.  If the new expiration date is not taking effect, contact technical support for assistance.

Under the new licensing method using the Broadcom (BCL) licensing, once the license is purchased it will be Auto Updated periodically and the Providers and Rules can be activated. If you want to update the license more quickly, it can be updated manually by selecting About -> License Details and selecting Auto Update.