TAXII Server

Details
Content
Dependencies
Version History

This pack provides TAXII Services for system indicators (Outbound feed).

Integrations

Name	Description
TAXII2 Server	This integration provides TAXII2 Services for system indicators (Outbound feed).
TAXII Server	This integration provides TAXII Services for system indicators (Outbound feed).

Integrations

Name	Description
TAXII Server	This integration provides TAXII Services for system indicators (Outbound feed).
TAXII2 Server	This integration provides TAXII2 Services for system indicators (Outbound feed).

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

2.2.10 - 9135808 (May 19, 2026)

Integrations

TAXII2 Server

Maintenance and stability improvements.

Related pull requests:
- 44323

Download

2.2.9 - 9025379 (May 14, 2026)

Integrations

TAXII2 Server

Documentation and metadata improvements.

Related pull requests:
- 44231

Download

2.2.8 - 8923689 (May 11, 2026)

Integrations

TAXII2 Server

Updated the TAXII 2 Server cache mechanism by implementing a background refresh and stale-while-revalidate strategy, ensuring better performance and availability when multiple clients access the service simultaneously.
Updated the Docker image to: demisto/flask-nginx:1.0.0.8240011.

Related pull requests:
- 43793

Download

2.2.7 - 8865647 (May 10, 2026)

Integrations

TAXII2 Server

Added support for the tags field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 44209

Download

2.2.6 - 8592679 (April 29, 2026)

Integrations

TAXII2 Server

Added support for the trafficlightprotocol field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 43703

Download

2.2.5 - 8009783 (March 30, 2026)

Integrations

TAXII2 Server

Updated the TAXII2ApiModule to fix an issue where the labels field was missing custom tags in TAXII 2.1 responses.

Related pull requests:
- 43618
- 43388
- 43616
- 42281
- 43619
- 43569
- 43568
- 43547
- 43567
- 43485
- 43408
- 43625
- 43636

Download

2.2.4 - 7843807 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

2.2.3 - 7001339 (February 3, 2026)

Integrations

TAXII2 Server

Fixed an issue where the valid_until field was not being extracted correctly.

Related pull requests:
- 42887

Download

2.2.2 - 6744840 (January 18, 2026)

Integrations

TAXII2 Server

Added support for SOFTWARE type indicators from STIX 2.1 bundles.

Related pull requests:
- 42627

Download

2.2.1 - 6332198 (December 18, 2025)

Integrations

TAXII2 Server

Fixed an issue where the tags field was not extracted for all indicator types.

Related pull requests:
- 42300

Download

2.2.0 - 6187133 (December 8, 2025)

Integrations

TAXII2 Server

Optimized pagination to improve overall performance and response times when using the request next parameter.

Related pull requests:
- 41813

Download

2.1.12 - 6154473 (December 5, 2025)

Integrations

TAXII2 Server

Added the Cortex XSOAR Extensions fields in STIX Domain Object (SDO) indicators. Cortex XSOAR now includes custom XSOAR indicator fields as extension properties when generating indicators.
Updated the Docker image to: demisto/flask-nginx:1.0.0.6091652.

Related pull requests:
- 42081

Download

2.1.11 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

2.1.10 - 4486728 (August 11, 2025)

Integrations

Internal code improvements.
Updated the Docker image to: demisto/taxii-server:1.0.0.3985599.

TAXII2 Server

Internal code improvements.
Updated the Docker image to: demisto/flask-nginx:1.0.0.3748048.

Related pull requests:
- 40522

Download

2.1.9 - 4473367 (August 10, 2025)

Integrations

TAXII2 Server

Updated the TAXII2 Server integration to support all types of indicators.

Related pull requests:
- 40835

Download

2.1.8 - R3980324 (June 26, 2025)

Integrations

TAXII Server

Updated the TAXII Server integration to support unified platform.

Related pull requests:
- 40242

Download

2.1.7 - R3481649 (May 21, 2025)

Integrations

TAXII Server

Increased the page size constant when searching for TIM indicators in the polling service endpoint to improve performance.
Updated the Docker image to: demisto/taxii-server:1.0.0.3040451.

Related pull requests:
- 39295

Download

2.2.10 - 9135808 (May 19, 2026)

Integrations

TAXII2 Server

Maintenance and stability improvements.

Related pull requests:
- 44323

Download

2.2.9 - 9025379 (May 14, 2026)

Integrations

TAXII2 Server

Documentation and metadata improvements.

Related pull requests:
- 44231

Download

2.2.8 - 8923689 (May 11, 2026)

Integrations

TAXII2 Server

Updated the TAXII 2 Server cache mechanism by implementing a background refresh and stale-while-revalidate strategy, ensuring better performance and availability when multiple clients access the service simultaneously.
Updated the Docker image to: demisto/flask-nginx:1.0.0.8240011.

Related pull requests:
- 43793

Download

2.2.7 - 8865647 (May 10, 2026)

Integrations

TAXII2 Server

Added support for the tags field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 44209

Download

2.2.6 - 8592679 (April 29, 2026)

Integrations

TAXII2 Server

Added support for the trafficlightprotocol field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 43703

Download

2.2.5 - 8009783 (March 30, 2026)

Integrations

TAXII2 Server

Updated the TAXII2ApiModule to fix an issue where the labels field was missing custom tags in TAXII 2.1 responses.

Related pull requests:
- 43618
- 43388
- 43616
- 42281
- 43619
- 43569
- 43568
- 43547
- 43567
- 43485
- 43408
- 43625
- 43636

Download

2.2.4 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

2.2.3 - 7001339 (February 3, 2026)

Integrations

TAXII2 Server

Fixed an issue where the valid_until field was not being extracted correctly.

Related pull requests:
- 42887

Download

2.2.2 - 6744840 (January 18, 2026)

Integrations

TAXII2 Server

Added support for SOFTWARE type indicators from STIX 2.1 bundles.

Related pull requests:
- 42627

Download

2.2.1 - 6332198 (December 18, 2025)

Integrations

TAXII2 Server

Fixed an issue where the tags field was not extracted for all indicator types.

Related pull requests:
- 42300

Download

2.2.0 - 6187133 (December 8, 2025)

Integrations

TAXII2 Server

Optimized pagination to improve overall performance and response times when using the request next parameter.

Related pull requests:
- 41813

Download

2.1.12 - 6154473 (December 5, 2025)

Integrations

TAXII2 Server

Added the Cortex XSOAR Extensions fields in STIX Domain Object (SDO) indicators. Cortex XSOAR now includes custom XSOAR indicator fields as extension properties when generating indicators.
Updated the Docker image to: demisto/flask-nginx:1.0.0.6091652.

Related pull requests:
- 42081

Download

2.1.11 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

2.1.10 - 4486728 (August 11, 2025)

Integrations

TAXII Server

Internal code improvements.
Updated the Docker image to: demisto/taxii-server:1.0.0.3985599.

TAXII2 Server

Internal code improvements.
Updated the Docker image to: demisto/flask-nginx:1.0.0.3748048.

Related pull requests:
- 40522

Download

2.1.9 - 4473367 (August 10, 2025)

Integrations

TAXII2 Server

Updated the TAXII2 Server integration to support all types of indicators.

Related pull requests:
- 40835

Download

2.1.8 - R3980324 (June 26, 2025)

Integrations

TAXII Server

Updated the TAXII Server integration to support unified platform.

Related pull requests:
- 40242

Download

2.1.7 - R3481649 (May 21, 2025)

Integrations

TAXII Server

Increased the page size constant when searching for TIM indicators in the polling service endpoint to improve performance.
Updated the Docker image to: demisto/taxii-server:1.0.0.3040451.

Related pull requests:
- 39295

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 9, 2020
Last Release	May 19, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.