Configure TAXII#

This page describes how to configure TAXII services on EclecticIQ Intelligence Center.

For more information on the underlying Opentaxii service and configuration, see Configure Opentaxii server

TAXII 1 services#

After configuring a TAXII server, you can set up TAXII services.

A TAXII service is a specialized data handler that implements a specific TAXII capability.

EclecticIQ Intelligence Center supports the following TAXII services:

Service type

Description

Collection management service

You can use a TAXII collection management service to:

  • Request information about TAXII data collections.

  • Subscribe to TAXII data collections.

  • Cancel subscriptions to TAXII data collections.

You can poll a TAXII collection to:

  • Obtain overviews of the available content.

  • Check for updated content.

  • Select TAXII feeds and datasets to use as data sources.

TAXII data collections — structured TAXII data feeds, and unstructured TAXII datasets — are examples of TAXII inbox and TAXII poll service content.

Bindings:

  • TAXII HTTP 1.0

  • TAXII HTTPS 1.0

Discovery service

You can use a TAXII discovery service to obtain information about the availability and the use of TAXII services such as collection management, inbox, and polling.

Bindings:

  • TAXII HTTP 1.0

  • TAXII HTTPS 1.0

Inbox service

The TAXII inbox service enables data producers to initiate push messages to service consumers.

This service can be based on a subscription model, or it can be an unsolicited payload a producer pushes to a consumer.

Bindings:

  • TAXII HTTP 1.0

  • TAXII HTTPS 1.0

Poll service

The TAXII poll service enables consumers to request TAXII data collection content from a TAXII producer, usually through TAXII outgoing feeds.

Bindings:

  • TAXII HTTP 1.0

  • TAXII HTTPS 1.0

TAXII 2 services#

See Configure TAXII 2 services.