topic Re: Minemeld Alternative in Cortex XSOAR Discussions

Minemeld Alternative

FWPalolearner — Fri, 19 Nov 2021 10:30:56 GMT

Hello ,

On of our customer is dependent on their partner for Minemeld EDL

The Partner is hosting the Minemeld server and now our customer is planning to build their own Minemeld

As Minemeld is no longer supported by PAN and is purely an open Source support product , What would be the best alternative and cost effective approach for the customer

I know building own Minemeld needs cost like provisioing servers etc , ;

The Customer networks is purely PAN FWs at 5 different locations , Can XSOAR Threat Intel be an option ?

Can we integrate it with PAN FW ?

Re: Minemeld Alternative

ryclough — Tue, 23 Nov 2021 16:24:30 GMT

Hello FWPalolearner, you are correct that XSOAR Threat Intel Management (TIM) should be your path forward. We have migrated the use cases and integrations which existed in MineMeld to XSOAR TIM (including the FireWall integrations & others).

Re: Minemeld Alternative

FWPalolearner — Tue, 23 Nov 2021 17:44:39 GMT

Hello @ryclough Thanks for your reply

Can this TIm be purchased separately . I mean customer does not have requirement for a fullfledged XSOAR , but does XSOAR TIM will be too much for them as the requirement is only to have EDL ?

Re: Minemeld Alternative

ML_OG — Thu, 03 Feb 2022 10:06:11 GMT

@FWPalolearner - There are a few third party solutions out there too, as the XSOAR product is limit to a couple of feeds. You can use an Azure function app to have self-hosted solution, and there is also new third-party product called EDL Manager (comes at small cost).