Hi,
I am not sure how many of you are aware of the Stix & Taxii frameworks, but what I would love to do is to setup a Soltra www.soltra.com box that is setup to receive Intel-feeds and then feed that Intel to Sophos UTM.
I would have to convert the Stix dataset to something readable to Snort. But how easy would this be to setup with Sophos UTM?
Anyone has experience about feeding Snort inside Sophos UTM some data? Or some firewall rules in the UTM as well.
This thread was automatically locked due to age.
