1 Reply Latest reply on Jun 17, 2013 6:43 AM by dmease729

    GTI integration with MVM

      Hi,

      Is it possible to integrate global threat intelligence with MVM. If yes, please suggest how can i integrate GTI feeds with MVM.

        • 1. Re: GTI integration with MVM
          dmease729

          As far as I am aware, this doesnt exist directly, as MVMs purpose is to tell you what vulnerabilities and exposures exist.  I believe you can use this information if you integrate with an ePO server that is also integrated with NSP (or integrate directly to NSP) so if NSP sees malicious traffic it can cross reference with the known vulnerability.  This doesnt actually use GTI but NSP does - I suppose there may be something that could be seen that maps to a known system vulnerability and also the remote IP and port details could be used in the decision?

           

          Hope that makes sense...