STIX/TAXII support Fortigate 7.0

[toa-plat]

Hi,

I saw that STIX is supported in v7.0.2 and attempted to setup but did not have any luck because the feed I am trying to use is using the STIX/TAXII specification, that requires the collection name, discovery service etc. be specified in order to connect.  It does not simply access a txt file as it seems Fortigate's current implementation is setup to do.

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/400345/stix-format-for-external-thre...

I know this is available for other firewalls such as Palo Alto - https://live.paloaltonetworks.com/t5/general-topics/fs-isac-new-stix-taxii-feeds/m-p/334361#M95201

[Anthony_E]

Hello toa-plat,

Our Knowledge Base just published this article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-troubleshoot-STIX-issues/ta-p/20760...

Could you please have a look and tell me if it helped you?

Regards,