Question: Push/Poll Setup

[johestephan]

Hello all,
I have planed to use MISP-Taxii-Server to interconnect my MISP platform with a SIEM solution,
so that the SIEM solution polls indicators out of MISP.

Somehow I got lost in the setup and currently I question myself if that even works. Starting with that MISP-Taxii-Serveronly runs on 127.0.0.1 (even when I change to 0.0.0.0).

Any hint or guidance?

[FloatingGhost]

Hello all

Just me here my dude
Me and far too much STIX

runs on 127.0.0.1 (even when I change to 0.0.0.0).

That should be adequate for testing.

If you want to access externally, you shouldn't be using the dev server, and should instead be using gunicorn production server

[johestephan]

And you are more then enough :-)

Thanks, will try that

[FloatingGhost]

Nothing here for nearly a month - is it all working and OK to close this?

[davidonzo]

Just to suggest to use gunicorn for workers and service management.
To explose OpenTAXII server, I use gunicorn with nginx as reverse proxy.

This solved the poor opentaxii logging system and permitted a better management of the opentaxii routes (for example I don't want to expose the /management/heath URL that don't require authentication).

Just used the suggestions found in the official gunicorn documentation.

[FloatingGhost]

Assuming fixed. Closing.