You can configure the Automation Settings to automatically poll the configured TAXII server for new threat intelligence feeds at regular intervals. The scheduler handles the retrieval of STIX bundles, allowing the Manager to continuously update Indicators of Compromise (IoCs) without manual intervention.
.png)
Navigate to Policy → <Admin Domain Name> → Threat Intelligence → Automation Settings.
In the Enable field, select Yes to enable the scheduler.
Note
To disable the scheduler, select No.
In the Type field, select the scheduler frequency:
Hourly: Select Hourly frequency and specify the Hourly Feed Collection Time in minutes.
Daily: By default, Daily frequency is selected. In the Daily Feed Collection Time field, set the time for the update in the hr/min format.
Click Save.