R81.10 - TAXII Question

[mikegemini]

Hi, I was looking more into my clients R81.10. I see that it can utilize STIX for threat intelligence.

Can it also utilize the TAXII protocol to get STIX? I want to try to integrate some threat intelligence streams to help my client out.

Thanks.

[CaseyB]

You should be able to accomplish this with external IOC feeds in R81.10. Check out sk132193 .

[the_rock]

I agree with @CaseyB , thats probably your best bet.

Andy

[PhoneBoy]

There are two ways to ingest and distribute TAXII directly:

• Using Private ThreatCloud: https://support.checkpoint.com/results/sk/sk125693
• Using Horizon NDR: https://www.checkpoint.com/horizon/ndr/