Hi community! I'm test driving ESA C000V virtual appliance with External Threat Feed (ETF) via a taxii server.The ETF is configured to scan incoming mail for url reputation and attachment file info. It was successful in the blocking of malicious urls...

Hi all, I've searched the doc and the forum but did not see a clear answer on this.What is the retention policy of the data from the external feed? or is there one by age or size? The feed configuration "Age of Threat Feeds" and "Time Span of Poll Se...