Forum Discussion
GhostCcamm
May 29, 2020Copper Contributor
TAXII2 and Sentinel
Hi there, I think I have finally found the right community for this. I am a university student that is currently working on a project for sharing Threat Intelligence to Azure Sentinel. We hav...
GaryBushey
May 29, 2020Bronze Contributor
GhostCcamm First, your VM would need to be exposed to the Internet since that is where you are obtaining your data. You can use a Network Security Group to just allow the traffic from your provider to access the server however.
Second, while I am not 100% certain HTTPS is required I am 90% certain it is. Even if it isn't required, you should use it
- GhostCcammMay 29, 2020Copper ContributorThanks Gary! We have only been using HTTP for testing, but will switch to HTTPS. Also thanks for clarifying that that using the NSG to control access is the way to go. I just thought that there might of been a way to connect Sentinel to our subnet and wouldn't need to give our VM a public IP.