Forum Discussion

Muhannad's avatar
Muhannad
Icon for Cirrus rankCirrus
Dec 03, 2022

F5 threat intelligence.

Dear Experts,

I am searching around if F5-DNS or AFM is capable of receiving threat intelligence in real-time from TAXII servers related to private community or ISAC?

I need more information about F5 capablities to integrate with threat intelligence even with o

Regards,

Muhannad

security

2 Replies

Sort By
  • Leslie_Hubertus's avatar
    Leslie_Hubertus
    Ret. Employee
    Dec 07, 2022

    Hi Muhannad  - I see nobody has answered you yet, so I've shared the link to your question with a colleague who may be able to help. Can you elaborate on your last sentence, though? It looks incomplete. 

    "I need more information about F5 capablities to integrate with threat intelligence even with o" <--?

    Leslie

  • AubreyKingF5's avatar
    AubreyKingF5
    Icon for Admin rankAdmin
    Dec 08, 2022

    I don't know enough about taxii, but it appears to communicate RESTfully. I am digging into this, but do you happen to know what sorts of things a taxii sends? Is the expectation that it programs a deny-list in real time? Is the expectation simply IP blocking (AFM) based on threat intelligence? Can taxii host a deny-list? If so, AFM / AWAF can be programmed to consume that in an automated fashion..