Does Ironport share Threat Intel?

[Greg.Howley]

Does Ironport support the sharing of Threat Intelligence by:

• TAXII protocol?
• Manual ingestion of threat intel (ex. CSV upload)?
• Export of threat intel (ex. to share to other tools)?

[Ken Stieers]

If what you're really asking is "can I get the threat Intel out of the ironport and feed it to other tools?" No,that data cant be exported

[Greg.Howley]

Both, actually. Can Ironport ingest my other intel, or is it a black box?

[Libin Varghese]

The ESA fetches most of its data from Cisco servers for rule updates, no integration with other devices is currently configurable.

Regards,

Libin Varghese