TLP
By default, TLP 1.0 is enabled. You can upgrade to TLP 2.0 from the Analyst Portal. Go to Administration > Configuration > Features and set TLPVersion as TLP 2.0.
TLP 2.0 designations are updated throughout the application and you can start using them across all modules in the CSAP application.
TLP:CLEAR used instead of TLP:WHITE
New designation TLP:AMBER+STRICT is available throughout the application
Any alerts, Doc Library files, recipient groups, community alert sharing conditions, and intel submissions that are tagged as TLP:WHITE will appear as TLP:CLEAR.
It is not recommended to downgrade from TLP 2.0 to TLP 1.0. However, if you choose to do so, any existing alerts, Doc Library files, recipient groups, community alert sharing conditions, and intel submissions will have the following changes:
TLP:AMBER+STRICT appear as TLP:AMBER
TLP:CLEAR appear as TLP:WHITE.
If the receiving community is not TLP 2.0 compliant, the conditions created using
TLP:AMBER+STRICT are treated as TLP:AMBER
TLP:CLEAR are treated as TLP:WHITE
The alerts are received in CTIX as follows:
Alerts that are tagged as TLP:AMBER + STRICT are received as TLP:AMBER.
Alerts tagged as TLP:CLEAR are received as TLP:WHITE.
When you upgrade from TLP 1.0 to TLP 2.0, any existing TLP widgets in the dashboard that include TLP:WHITE will appear as TLP:CLEAR .
When you downgrade from TLP 2.0 to TLP 1.0, there is no impact on any existing widgets created on the CSAP dashboard. The TLP widgets may be inconsistent as they will still reflect data with TLP 2.0 designations.
The following features in CSAP have an impact when you switch between TLP versions:
Alerts
Doc Library
Intel Submissions
Community Sharing
Recipient Groups
Knowledge Base
Dashboard
Request for Information
Survey
Reports
Export data from CSAP