Cisco SMA
Supported by Filigran
Infrastructure & Attack Surface Visibility
Overview
Imports daily IOCs from the Cisco SMA (Security Management Appliance) database into OpenCTI. Retrieves only the current day's indicators — interval should be set to 24 hours.
This connector imports data from the CISCO SMA database. The connector does not retrieve historical data. It retrieves the day's IOCs on a daily basis. For this reason, there is no reason to set the “interval” variable to a value other than “24”. Setting more would cause IOCs to be missed, setting less would simply reimport IOCs already retrieved. The connector creates the following OpenCTI entities: