TAXII Server

Details
Content
Dependencies
Version History

This pack provides TAXII Services for system indicators (Outbound feed).

Integrations

Name	Description
TAXII Server	This integration provides TAXII Services for system indicators (Outbound feed).
TAXII2 Server	This integration provides TAXII2 Services for system indicators (Outbound feed).

Integrations

Name	Description
TAXII Server	This integration provides TAXII Services for system indicators (Outbound feed).
TAXII2 Server	This integration provides TAXII2 Services for system indicators (Outbound feed).

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

2.1.10 - 4486728 (August 11, 2025)

Integrations

TAXII Server

Internal code improvements.
Updated the Docker image to: demisto/taxii-server:1.0.0.3985599.

TAXII2 Server

Internal code improvements.
Updated the Docker image to: demisto/flask-nginx:1.0.0.3748048.

Related pull requests:
- 40522

Download

2.1.9 - 4473367 (August 10, 2025)

Integrations

TAXII2 Server

Updated the TAXII2 Server integration to support all types of indicators.

Related pull requests:
- 40835

Download

2.1.8 - R3980324 (June 26, 2025)

Integrations

TAXII Server

Updated the TAXII Server integration to support unified platform.

Related pull requests:
- 40242

Download

2.1.7 - R3481649 (May 21, 2025)

Integrations

TAXII Server

Increased the page size constant when searching for TIM indicators in the polling service endpoint to improve performance.
Updated the Docker image to: demisto/taxii-server:1.0.0.3040451.

Related pull requests:
- 39295

Download

2.1.6 - 3042633 (April 2, 2025)

Integrations

TAXII Server

Metadata and documentation improvements.

TAXII2 Server

Metadata and documentation improvements.

Related pull requests:
- 39142

Download

2.1.5 - 2901908 (March 18, 2025)

TAXII Server

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

2.1.4 - 2472843 (February 16, 2025)

Integrations

TAXII Server

Updated the failed parsing error message to include the indicator value.

Related pull requests:
- 38628

Download

2.1.3 - 2438447 (February 11, 2025)

Integrations

TAXII2 Server

Fixed an issue where under specific conditions the exported times of the indicators were presented as UTC when they were actually in local time. All the exported times are now correctly parsed into UTC the time zone.

Related pull requests:
- 38349

Download

2.1.2 - 2306914 (February 9, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 38217

Download

2.1.1 - R2040490 (January 22, 2025)

Integrations

TAXII Server

Improved configuration documentation and instructions.

TAXII2 Server

Improved configuration documentation and instructions.

Related pull requests:
- 37867

Download

2.1.0 - 1834150 (December 18, 2024)

Integrations

TAXII Server

Added a temporary port for the longRunningPort parameter when using the Test button. This ensures the instance has a functional port until the server assigns one, even if the client does not click Save.

TAXII2 Server

Added a temporary port for the longRunningPort parameter when using the Test button. This ensures the instance has a functional port until the server assigns one, even if the client does not click Save.
Updated the Docker image to: demisto/flask-nginx:1.0.0.117310.

Related pull requests:
- 37588

Download

2.0.73 - 1775999 (December 9, 2024)

Integrations

TAXII2 Server

Updated the parsing logic for the autonomous system indicator. When the indicator value is a number, it will be converted to a string.

Related pull requests:
- 37563
- 37449

Download

2.0.72 - 1741355 (December 3, 2024)

Integrations

TAXII2 Server

Fixed an issue where indicators without names were not properly parsed.
Updated the Docker image to: demisto/flask-nginx:1.0.0.110933.

Related pull requests:
- 36027

Download

2.0.71 - 1696672 (November 24, 2024)

Integrations

TAXII Server

Updated the default value of Listen Port parameter for use on XSIAM and XSOAR-SaaS.
Updated the Docker image to: demisto/taxii-server:1.0.0.117317.

Related pull requests:
- 37305

Download

2.0.70 - R1651134 (November 14, 2024)

Integrations

TAXII2 Server

Updated the default value of Listen Port parameter for use on XSIAM and XSOAR-SaaS.

Related pull requests:
- 37186

Download

2.0.69 - 1624996 (November 11, 2024)

Integrations

TAXII2 Server

Updated the default value of Listen Port parameter for use on XSIAM and XSOAR-SaaS.
Updated the Docker image to: demisto/flask-nginx:1.0.0.115634.

Related pull requests:
- 37144

Download

2.0.68 - 1480610 (October 8, 2024)

Integrations

TAXII2 Server

Updated the integration description and tooltips.

Related pull requests:
- 36574

Download

2.0.67 - 1457639 (October 1, 2024)

Integrations

TAXII2 Server

Enhanced TAXII2FeedApiModule to support setting indicator enrichment exclusion in select feeds. The change has no impact on this integration.

Related pull requests:
- 36445

Download

2.0.66 - 1387547 (September 15, 2024)

Integrations

TAXII2 Server

Fixed an issue where running a request to the taxii2 endpoint returned an incorrect api-root.
Updated the Docker image to: demisto/flask-nginx:1.0.0.110620.

Related pull requests:
- 36104

Download

2.0.65 - 1358619 (September 8, 2024)

Integrations

TAXII2 Server

Fixed an issue where the fetch-indicators command failed to parse nested reports indicators correctly in the Unit42v2 Feed.

Related pull requests:
- 35723

Download

2.0.64 - R1320807 (August 28, 2024)

Integrations

TAXII2 Server

Fixed an issue where the TAXII2 server failed to handle requests with indicators of type 'File' with invalid hash value.

Related pull requests:
- 34484

Download

2.1.10 - 4486728 (August 11, 2025)

Integrations

TAXII Server

Internal code improvements.
Updated the Docker image to: demisto/taxii-server:1.0.0.3985599.

TAXII2 Server

Internal code improvements.
Updated the Docker image to: demisto/flask-nginx:1.0.0.3748048.

Related pull requests:
- 40522

Download

2.1.9 - 4473367 (August 10, 2025)

Integrations

TAXII2 Server

Updated the TAXII2 Server integration to support all types of indicators.

Related pull requests:
- 40835

Download

2.1.8 - R3980324 (June 26, 2025)

Integrations

TAXII Server

Updated the TAXII Server integration to support unified platform.

Related pull requests:
- 40242

Download

2.1.7 - R3481649 (May 21, 2025)

Integrations

TAXII Server

Increased the page size constant when searching for TIM indicators in the polling service endpoint to improve performance.
Updated the Docker image to: demisto/taxii-server:1.0.0.3040451.

Related pull requests:
- 39295

Download

2.1.6 - 3042633 (April 2, 2025)

Integrations

TAXII Server

Metadata and documentation improvements.

TAXII2 Server

Metadata and documentation improvements.

Related pull requests:
- 39142

Download

2.1.5 - 2929110 (March 20, 2025)

TAXII Server

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

2.1.4 - 2472843 (February 16, 2025)

Integrations

TAXII Server

Updated the failed parsing error message to include the indicator value.

Related pull requests:
- 38628

Download

2.1.3 - 2438447 (February 11, 2025)

Integrations

TAXII2 Server

Fixed an issue where under specific conditions the exported times of the indicators were presented as UTC when they were actually in local time. All the exported times are now correctly parsed into UTC the time zone.

Related pull requests:
- 38349

Download

2.1.2 - 2306914 (February 9, 2025)

Integrations

TAXII Server

Fixed an issue where the TAXII Server returned the wrong Address to create a connection.

Related pull requests:
- 38217

Download

2.1.1 - R2040490 (January 22, 2025)

Integrations

TAXII Server

Improved configuration documentation and instructions.

TAXII2 Server

Improved configuration documentation and instructions.

Related pull requests:
- 37867

Download

2.1.0 - 1834150 (December 18, 2024)

Integrations

TAXII Server

Added a temporary port for the longRunningPort parameter when using the Test button. This ensures the instance has a functional port until the server assigns one, even if the client does not click Save.

TAXII2 Server

Added a temporary port for the longRunningPort parameter when using the Test button. This ensures the instance has a functional port until the server assigns one, even if the client does not click Save.
Updated the Docker image to: demisto/flask-nginx:1.0.0.117310.

Related pull requests:
- 37588

Download

2.0.73 - 1775999 (December 9, 2024)

Integrations

TAXII2 Server

Updated the parsing logic for the autonomous system indicator. When the indicator value is a number, it will be converted to a string.

Related pull requests:
- 37563
- 37449

Download

2.0.72 - 1741355 (December 3, 2024)

Integrations

TAXII2 Server

Fixed an issue where indicators without names were not properly parsed.
Updated the Docker image to: demisto/flask-nginx:1.0.0.110933.

Related pull requests:
- 36027

Download

2.0.71 - 1696672 (November 24, 2024)

Integrations

TAXII Server

Updated the default value of Listen Port parameter for use on XSIAM and XSOAR-SaaS.
Updated the Docker image to: demisto/taxii-server:1.0.0.117317.

Related pull requests:
- 37305

Download

2.0.70 - R1651134 (November 14, 2024)

Integrations

TAXII2 Server

Updated the default value of Listen Port parameter for use on XSIAM and XSOAR-SaaS.

Related pull requests:
- 37186

Download

2.0.69 - 1624996 (November 11, 2024)

Integrations

TAXII2 Server

Updated the default value of Listen Port parameter for use on XSIAM and XSOAR-SaaS.
Updated the Docker image to: demisto/flask-nginx:1.0.0.115634.

Related pull requests:
- 37144

Download

2.0.68 - 1480610 (October 8, 2024)

Integrations

TAXII2 Server

Updated the integration description and tooltips.

Related pull requests:
- 36574

Download

2.0.67 - 1457639 (October 1, 2024)

Integrations

TAXII2 Server

Enhanced TAXII2FeedApiModule to support setting indicator enrichment exclusion in select feeds. The change has no impact on this integration.

Related pull requests:
- 36445

Download

2.0.66 - 1387547 (September 15, 2024)

Integrations

TAXII2 Server

Fixed an issue where running a request to the taxii2 endpoint returned an incorrect api-root.
Updated the Docker image to: demisto/flask-nginx:1.0.0.110620.

Related pull requests:
- 36104

Download

2.0.65 - 1358619 (September 8, 2024)

Integrations

TAXII2 Server

Fixed an issue where the fetch-indicators command failed to parse nested reports indicators correctly in the Unit42v2 Feed.

Related pull requests:
- 35723

Download

2.0.64 - R1320807 (August 28, 2024)

Integrations

TAXII2 Server

Fixed an issue where the TAXII2 server failed to handle requests with indicators of type 'File' with invalid hash value.

Related pull requests:
- 34484

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 9, 2020
Last Release	August 11, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.