Platform, Element, and License Requirements

Hosting Platforms

You can host threat intelligence director on physical and virtual Secure Firewall Management Centers:

• running Version 6.2.2 or later.

• configured with a minimum of 15 GB of memory.

• configured with REST API access enabled. See Enabling REST API Access.

Elements

You can use any Secure Firewall Management Center-managed device as a threat intelligence director element if the device is running Version 6.2.2 or later.

Licensing

To configure the file policies for SHA-256 observable publishing, you need the following licensed devices:

• For smart licensed devices:

  • IPS License - For IPv4, IPv6, URL, and DNS detection and observables

  • Malware Defense License - For SHA-256 detection and observables

• For classic licensed devices:

  • Protect License - For IPv4, IPv6, URL, and DNS detection and observables

  • Malware License - For SHA-256 detection and observables

For more information, see Configure Policies to Support Threat Intelligence Director and About Licenses.