FireEye NX SmartVision SC Killswitch

SmartVision is the lateral movement detection module of the network security product (NX) of FireEye. There are too many documents and descriptions about it on FireEye’s website, so I will not touch on it here. I just want to explain what SC Killswitch is in the SmartVision configuration, since there is no any explanation about it anywhere.

The SC Killswitch is not a user configurable setting, so there is no any command to enable or disable it even if you see it is like configurable in show menu.

#show smartvision config

It is something about status of the SmartVision module. Sometimes, some Security-Contents may have to restart SmartVision module. This SC Killswitch value indicates whether SmartVision module should be restarted or not. If this value is no;

SC Killswitch: no

this simply indicates that there is no need to restart SmartVision module.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s