{{config.title}}
You can enable a TAXII Server to create an outgoing feed based on the threat intelligence you want to share externally.
TAXII clients will be able to subscribe to the collection and receive feeds.
Enable TAXII Server
TAXII Server Details
Server Address
{{taxiiServerAddress}}api/taxii/1/
Authentication
Basic Auth with username and password. You could also use https://<username>:<password>@<server_fqhn>/api/taxii/1
Endpoints Available
  1. api/taxii/1/collections : To list all available datasets
  2. api/taxii/1/collections/<datasetId>: Lists details of a dataset
  3. api/taxii/1/collections/<datasetId>/objects: List threat feeds in a dataset
  4. api/taxii/1/collections/<datasetId>/objects/<objectId>: List details of a specific feed object
Available Datasets
All datasets of Threat Intel Feeds module will be listed here.
You can add more Datasets under the Threat Feeds section.
Showing {{datasets.length}} records
Dataset Name ID URL
{{dataset.name}} {{dataset.uuid}} 
JSON
CSV
No datasets found.
Feed To Indicator Linking
Select feed confidence threshold for automatically updating matching indicator record reputation
Enable Feed To Indicator Linking
The reputation of an indicator for which there is a matching feed found, will automatically be updated with the feed's reputation, given the feed confidence is equal or above this provided value.