Soltra Edge® is an industry-driven software that automates processes to share, receive, validate and act on cyber threat intelligence. This documentation will help you in navigating the solution and in getting the most out of using Soltra Edge.
Getting Started with Soltra edge
This guide will get you up and running with Soltra Edge in 5 minutes or less!
Ensure you have imported the OVA into the hypervisor of your choice. If you have not completed this step, please see the “Soltra Edge Installation & VM Configuration Guide” (http://soltra.com/en/documentation/ctx-soltra-edge/installation-and-vm-configuration/).
The first thing we want to do is log into Soltra Edge.
After login, select “Settings > System Settings” from the top navigation bar.
Populate the “STIX Publishing Namespace” fields for “XML Namespace URI” and “XML Namespace Alias”.
Your appliance is now set up to build objects and publish objects!
Poll a Threat Intelligence Source
Select “Settings > Sites” and select the Directory Lookup dropdown.
Select “View TAXII Directory Service”.
In the left most pane labeled “Directory”, select “pickupstix.io” and select the “system.default” feed from the center “Feeds” pane.
Select to “Configure This Feed”.
Select a scheduling option in the “Feed Details” pane, check the “Poll Now” box, and click the green “Connect” button.
A brief description of each option:
- Manually – allows you to set a time/date stamp for when to being polling but will not poll automatically after the manually started initial poll.
- Every “X” minutes – allows you to state a time in minutes you want Edge to automatically poll the threat intelligence source.
- It is recommended to use 10 minutes or more
- Hourly at “X” minutes – allows you to state when polling will begin at either 5, 15, 30, or 60 minutes of the hour
Select the “Check out your feed here” link to be taken to the configured feed.
You now have data from a threat intelligence source in PickupSTIX, coming into your appliance and set to a schedule!
Publishing a Feed
In the top navigation bar, select “Publish”.
Select the “Add” button.
Use the menu on the left of the page and each menu’s corresponding form to dictate what object you want your feed to contain.
Add a name to your feed and select the blue “Apply” button.
Your feed shows the data requested. You now have a feed published!
For more information, join the conversation in the Soltra Edge Forums at forums.soltra.com.
Thanks for contacting NC4! A member of our team will be in touch with you shortly.