Forum Discussion

mujju016's avatar
mujju016
Copper Contributor
Feb 13, 2023

Threat intelligence TAXII

I am trying to add the Threat intelligence - TAXII connector in Sentinel. Upon entering the asked details such as mentioned below:

Friendly Name: TAXIIFeeds

APIhttps://limo.anomali.com/api/v1/taxii2/feeds/

Collection ID: 107 (tried by entering 135, 136 as well)

Username: guest

Password: guest

 

Selected Import Indicator as All Available(tried other options as well) and Polling Frequency as Once a day (tried other options as well). 

 

Post entering the above mentioned details, when I click Add,  I am getting error as "TAXII connector already exists with the same API root URL and Collection ID or inputs are not valid."

 

It seems the API https://limo.anomali.com/api/v1/taxii2/feeds/ is no more valid. When I try to open, it throws an error as "This site can’t be reached". Also, this URL (https://www.anomali.com/resources/limo)  it says the API URL is changed.

 

Not sure where the issue is. Can someone help on this please. 

 

Best regards.

    • mujju016's avatar
      mujju016
      Copper Contributor
      I am using the same as per mentioned by Microsoft.

      Is there any other way for this? please guide.
      • mikhailf's avatar
        mikhailf
        Steel Contributor
        Where do you see that Limo was mentioned by Microsoft?
        This service stopped providing free indicators. I think because of that you have an issue.

Resources