When the Manager integrates with Global Threat Intelligence to obtain the reputation scores on hosts and geo‑locations, the API is used to send back the feature usage data to Trellix and there is a possibility of the API getting overloaded.
Perform the following steps for troubleshooting:
If the proxy server is enabled, verify that "tunnel.web.trustedsource.org" is allowed by proxy server ACLs.
In the Manager, select Manager → Integration → GTI and check if the Alert Data Details option is enabled.
Check if SDK boot straps to Global Threat Intelligence cloud successfully by checking for below in ems.log.
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - Major version:
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - 2
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - Minor version:
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - 0
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - Version description:
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - TrustedSource SDK 2.0.5.02 (Build 1117)
2011-12-06 15:55:01,510 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - Version:
2011-12-06 15:55:01,511 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - 2.0.5.02-1117
2011-12-06 15:55:01,672 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - Using Proxy Server:1.1.1.1, port: 20
2011-12-06 15:55:01,780 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - Device Id: 9b11e1c4-069e-4195-8dd1-c2842ba338f6
2011-12-06 15:55:01,780 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - MIICZjCCAc+gAwIBAgICEFIwDQYJKoZIhvcNAQEFBQAwNjEZMBcGA1UEAxQQVHJ1c3RlZFNvdXJjZV9DQTEMMAoGA1UEChMDU0NDMQswCQYDVQQGEwJVUzAe
2011-12-06 15:55:01,780 INFO [http-0.0.0.0-9999-3] com.intruvert.ts.helper.TSRatingLookupHelper - MIICXQIBAAKBgQDegOtxL2JHaGLwU6RTQKPfGtzMp3zxiKRc4yPqgPtIgZqReQj7yw6pqvpBmpcx/OobEjs0hA8v0abE3BFwEX0Mezre2B9NpPhuJnNHhe4c/cGdxtC53