Configuration fields
Beside the common configuration fields as described in Create External Orchestrator the following fields can be configured:
|
Common Field |
Required |
Description |
|---|---|---|
|
Name |
Yes |
User specified name of the orchestrator. |
|
Description |
Yes |
User specified description of the orchestrator. |
|
Vendor |
Yes |
The vendor provides intelligence data feeds. |
|
Full Snapshot Interval |
Yes |
The interval (in seconds) to perform a full snapshot of the TAXII feed. (Default: 1 day) |
|
Poll Url |
Yes |
The polling full URL path to poll data. |
|
Collection |
Yes |
The TAXII feed collection name to be polled. |
|
Poll Days |
Yes |
The number of earlier days threat data to poll from TAXII feed. |
|
Username |
Username for authentication. |
|
|
Password |
Password for authentication. |
|
|
Certificate |
Client certificate used for authentication. |
|
|
Key |
Key corresponding to client certificate. |
|
|
CA Certificate |
CA Certificate to validate orchestration endpoint. |
|
|
Accept Self-Signed Cert |
Checkbox to disable strictSSL checking of the TAXII API server cer- tificate |
|
|
Secureconnector Tunnel |
Tunnel connections to this orchestrator’s hosts through the Secure Con- nector tunnel. |
|
|
Hosts List |
Yes |
The hostname/ip and port pairs pointing to the TAXII server(s). |