Threat Management


Adding TAXII server

To add a new TAXII server,

  1. Go to Settings > Threat Management > Add New Server.
  2. In the Add Server box, enter the desired Display name, URL, Username and Password.
  3. In the Schedule drop down list, select the desired type of schedule and the exact time for the TAXII server feed collection.
  4. In the Poll from box, pick a date from when the past feeds should be collected.
  5. To save the server configuration, click Add Server.

 

Editing TAXII server configuration 

To edit an existing TAXII server,

  1. Go to Settings > Threat Management and click the edit icon. 
  2. Make the desired changes in the Edit Server box.
  3. To save the changes made, click the Update server button.

 

Deleting TAXII server

To delete an existing TAXII server,

  1. Go to Settings > Threat Management.
  2. Click the trash icon corresponding to the server to be deleted.
  3. Click Yes in the delete confirmation pop up box.

 

Managing TAXII feeds

To manage an existing TAXII server's feed, 

  1. Go to Settings > Threat Management.
  2. Click Manage Feeds corresponding to the server to be managed.
  3. Click the enable/disable icon to enable/disable polling the corresponding server.
  4. Click Poll now to poll the corresponding feed immediately.
Get download link