If I have a configuration of 2 taxii outputs within a node, the output feed discovery service url for both taxii output nodes are the same, in this case, how do we differentiate them? Would authentication with Tags helps? Thanks!
In TAXII you don't need a URL per feed, the TAXII Client interrogates the TAXII Discovery Service to discover the available services and then the client interrogates the TAXII Collection Management Service (whose URL is returned by the TAXII Discovery Service) to list the available Data Feeds.
So basically yes, MineMeld does support multiple output TAXII Data Feeds and you just need one URL to access them all. Based on authorization configs (TAGS) different users will see different available feeds.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!