IBM Support

QRadar: How to disable or enable encryption compression

How To


Summary

Encryption compression is used with tunnels to compress the data that is transferred. Compression is helpful with poorly performing networks but requires more system performance to effectuate the encryption or decryption.

Objective

Disable or enable the encryption compression feature in QRadar.

Steps

Note: These steps are not a workaround for poor networks. To resolve network issues, administrators must contact their respective network administrator to improve latency and bandwidth.

  1. Log in to the QRadar Console as an administrator.
  2. On the Admin tab, click System and License Management.
  3. Make sure that Display shows Systems.
    image-20230530154326-1
  4. Click the host to modify.
  5. Click Deployment Actions.
    Deployment actions
  6. Click Edit Host.
    Edit Host Connection
  7. Click the checkbox for Encryption Compression to enable this feature. To disable it, uncheck the box.Encryption compression
    Note: The console should not have Encrypt Host Connection enabled unless specifically requested by support because it can prevent the console from communicating with other managed hosts.
  8. Click Save.
  9. Deploy the changes.

    Result
    After the deploy completes, the managed host compresses the data that it transfers.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtNAAQ","label":"Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
31 May 2023

UID

ibm16995723