Threat Management


Adding TAXII server

To add a new TAXII server,

  1. Go to Settings > Threat Management > Add New Server.
  2. In the Add Server box, enter the desired Display name, URL, Username and Password.
  3. In the "Schedule" drop down list, select the desired type of schedule and the exact time for the TAXII server feed collection.
  4. In the "Poll from", pick a date from when the past feeds should be collected.
  5. To save the server configuration click on Add Server.

 

Editing TAXII server configuration 

To edit an existing TAXII server,

  1. Go to Settings > Threat Management and click on edit icon. 
  2. Make the desired changes in the Edit server box.
  3. To save the changes made, click on the Update server.

 

Deleting TAXII server

To delete an existing TAXII server,

  1. Go to Settings > Threat Management.
  2. Click on trash icon, corresponding to the server to be deleted.
  3. Click on "Yes" in the delete confirmation pop up box.

 

Managing TAXII feeds

To manage an existing TAXII server's feed, 

  1. Go to Settings > Threat Management.
  2. Click on Manage Feeds, corresponding to the server to be managed.
  3. Click on enable/disable icon to enable/disable polling the corresponding server.
  4. Click on Poll now option to poll the corresponding feed immediately.