Configuring StixTaxii

Go to Settings >> Configuration from the navigation bar and click STIX/TAXII.

General Information

General Information consists of all the details about the fetched data. You can find the total number of logs fetched in Total Records and the status of fetched data in Status. You can also find the most recent attempt made to fetch data in Last Fetch Attempt and the last date and time when data was successfully fetched in Last Fetch Date.

  1. Go to Settings >> Configuration from the navigation bar and click STIX/TAXII.

  2. Click General Information.

General Information

General Information

Settings

  1. Go to Settings >> Configuration from the navigation bar and click STIX/TAXII.

  2. Click Settings.

  3. Select Enable Source to activate StixTaxii.

  4. Enter the Discovery URL, which is the location of the discovery service in the TAXII server.

  5. Select a STIX Version.

    5.1. If you select version 1.X, select the Logs From date. StixTaxii fetches logs from the specified date.

  6. Select Fetch Interval in either hours or days.

  7. Select Enable Basic Authentication if the TAXII server uses basic authentication.

  8. In User Credentials, enter TAXII server User Name and Password.

  9. Select Enable SSL Authentication if the TAXII server uses SSL authentication.

  10. In SSL Configuration:

    10.1. Upload the SSL certificate file in the Certification File.

    10.2. Upload the SSL key file in the Certificate Key.

    10.3. If you configured a password for SSL key decryption, enter it in Key Password. If you didn’t configure a password, leave it empty.

  11. Select Enable Proxy to use a proxy server.

  12. In Proxy Configuration:

    12.1. Enter the proxy server IP address and the Port number.

    12.2. Select HTTP or HTTPS protocol as required.

  13. Click Submit.

Configuring STIX

Configuring STIX


Helpful?

We are glad this guide helped.


Please don't include any personal information in your comment

Contact Support