Forum Discussion

chandraprathi's avatar
chandraprathi
Copper Contributor
Nov 03, 2020

Unable to see the feed from TAXII Server

We have developed the TAXII 2.1 server as per the protocol mentioned in the documentation from TAXII: https://oasis-open.github.io/cti-documentation/taxii/intro.html 

 

And we successfully configured our TAXII in the Azure sentinel as mentioned in the doc: https://docs.microsoft.com/en-us/azure/sentinel/import-threat-intelligence#adding-threat-indicators-to-azure-sentinel-with-the-threat-intelligence---taxii-data-connector 

 

But when we tried to look at the incoming feeds, it's zero.

 

Sample received Feeds Looks like this:

{
"more": true,
"objects": [
{
  # Threat Feed

}
],
"spec_version": "2.0",
"type": "bundle"
}

Note: We are using the Basic Auth

Can someone please assist me in what went wrong and how I can fix the same?

 

Thanks in advance.

No RepliesBe the first to reply

Resources