logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Unable to integrate FireEye STIX feeds via the STIX/TAXII connector

EDR: Unable to integrate FireEye STIX feeds via the STIX/TAXII connector

Environment

  • EDR Server: All Versions
  • STIX/TAXII Connctor: 1.6.7 and below
  • FireEye STIX 2.0 services

Symptoms

Attempts to configure that TAXII connector with FireEye STIX api feeds and authentication fails with a 403

Cause

FireEye STIX services use STIX version 2.x.

Resolution

  • The Carbon Black TAXII connector currently only supports STIX/TAXII version 1.x
  • Future versions of the connector will be developed to include support for STIX/TAXII version 2.x - CB-34095

Related Content


Labels (1)
Labels:
Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎01-24-2021
Views:
301
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.