Views:
You can configure the SMS to automatically remove Reputation entries for each Indicator of Compromise (IOC) type: IP addresses, domain names, URLs, or file hashes.

Procedure

  1. Select Profiles → Reputation Database → User Entries → Add.
  2. Select one of the following:
    • IP Address
    • Domain name
    • URL
    • File Hash
  3. Select the Reputation Entries TTL checkbox, and then click the calendar icon to select a date and time in which the SMS will automatically remove any revoked or out-of-date entries.
    Note
    Note
    Expired Reputation entries are deleted on the SMS and device. Use caution when you set the time to live (TTL) date on an entry as it might be associated with an action set in a filter package that is used to protect your network.
  4. Click OK.