Skip to main content

Cyware Threat Intelligence eXchange

MaxMind

Connector Category: Enrichment Tool

About Integration

MaxMind provides IP intelligence through the GeoIP brand to locate Internet visitors. Intel Exchange integrates with MaxMind to enrich IP addresses with geographic locations.

Configure MaxMind as an Enrichment Tool

Configure MaxMind to retrieve the geographic locations of IP addresses.

Before you Start 

Ensure you have the view, update, and create permissions for Enrichment Tools.

Steps 

To configure MaxMind as an enrichment tool, follow these steps:

  1. Sign in to Intel Exchange, and go to Administration > Enrichment Management > Enrichment Tools.

  2. Search and select the MaxMind (GeoIP) enrichment tool.

  3. Click Add Account. Enter the following details:

    • Account Name: Enter a unique account name to identify the instance. For example, MaxMind Enrichment.

    • Verify SSL: Select Verify SSL to verify the SSL certificate and secure the connection between theIntel Exchange and MaxMind servers. By default, Verify SSL is selected.

      Note

      We recommend you enable Verify SSL. If you disable this option, Intel Exchange may configure an instance for an expired SSL certificate. This may not establish the connection properly and Intel Exchange will not be able to notify you in case of a broken or improper connection.

  4. Click Save.

After adding an account successfully, you can view and enable the IP enrichment type. Additionally, you can configure Quota to restrict the number of enrichment requests sent from Intel Exchange to MaxMind. After the quota expires, you cannot make enrichment requests until the quota resets for the next quota duration. For more information, see Define Quota in Configure Enrichment Tools.

To understand the number of API calls and quota units consumed by the MaxMind enrichment tool per polling, refer to the following table.

Enrichment Tool

Feed Enrichment Type

No. of API calls

Quota Consumed

MaxMind

Retrieve IP Detail

2

1

You can configure an enrichment policy to automatically enrich threat data objects using the MaxMind enrichment tool. For more information, see Configure Enrichment Policy.Configure Enrichment Policy