Skip to main content
toa-plat
New Member
March 24, 2022
Question

STIX/TAXII support Fortigate 7.0

  • March 24, 2022
  • 1 reply
  • 2079 views

Hi,

 

I saw that STIX is supported in v7.0.2 and attempted to setup but did not have any luck because the feed I am trying to use is using the STIX/TAXII specification, that requires the collection name, discovery service etc. be specified in order to connect.  It does not simply access a txt file as it seems Fortigate's current implementation is setup to do.

 

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/400345/stix-format-for-external-threat-feeds-7-0-2

 

I know this is available for other firewalls such as Palo Alto - https://live.paloaltonetworks.com/t5/general-topics/fs-isac-new-stix-taxii-feeds/m-p/334361#M95201

 

 

 

 

 

1 reply

Anthony_E
Staff
Staff
March 27, 2022

Hello toa-plat,

 

Our Knowledge Base just published this article:

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-troubleshoot-STIX-issues/ta-p/207607

 

Could you please have a look and tell me if it helped you?

 

Regards,

Best Regards