topic Re: QRadar Fails to populate CIDR value in the Referenceset while polling from minemeld in General Topics

QRadar Fails to populate CIDR value in the Referenceset while polling from minemeld

Nocturnalknight — Sat, 14 Apr 2018 04:47:15 GMT

Re: QRadar Fails to populate CIDR value in the Referenceset while polling from minemeld

lmori — Mon, 16 Apr 2018 12:53:26 GMT

Hi @Nocturnalknight,

anything in QRadar app log file?

luigi

Re: QRadar Fails to populate CIDR value in the Referenceset while polling from minemeld

Nocturnalknight — Sat, 21 Apr 2018 09:27:42 GMT

Hi @lmori,

Its a limitation from the IBM side and am waiting for the fix.

Actually They need to handle the IP Ranges and CIDR values in the threat intel app.

Thanks and Regards,
Ramprasath

Re: QRadar Fails to populate CIDR value in the Referenceset while polling from minemeld

lmori — Fri, 04 May 2018 08:23:58 GMT

Hi @Nocturnalknight,

is the output connected to a processor or directly to the Miner?

TAXII DataFeed outputs should automatically translate IP Ranges to CIDRs to avoid this kind of incompatibilities.

Re: QRadar Fails to populate CIDR value in the Referenceset while polling from minemeld

Nocturnalknight — Sat, 05 May 2018 12:31:26 GMT

Dear @lmori,

Yes the output is connected to the processor.
And qradar cannot accept the value as ip ranges or CIDR
Values to the referencesets and that’s the limitation from qradar side.

Thanks and Regards,
Ramprasath