Open Data Exchange Layer (OpenDXL)

Connecting security software for real-time data and service orchestration

Download Data Sheet Download OpenDXL SDK

Open Data Exchange Layer Overview

Open Data Exchange Layer (OpenDXL) is at the core of our mission to enable security devices to share intelligence and orchestrate security operations in real time.

What is OpenDXL?

OpenDXL is our initiative to enhance the Security Connected vision of an adaptive system of interconnected services that communicate and share information to make real-time, accurate security decisions. OpenDXL leverages the McAfee Data Exchange Layer (DXL), which many vendors and enterprises already utilize, and delivers a simple, open path for integrating security technologies regardless of vendor.

Designed to improve the context of analysis, shorten workflows of the threat defense lifecycle, reduce complexities across security products and vendors, and increase the value of previously deployed applications, OpenDXL enables unprecedented collaboration in an open, real-time system. By attaching to a common application framework, each participant enters into a unified ecosystem, one that gains value and capability as the network effect activates.

Data Exchange Layer Architecture

The DXL architecture allows DXL clients (services) to communicate with each over the message bus in near real time. Apps simply publish and subscribe to message topics, or make calls to DXL services in a request/response invocation similar to RESTful APIs. The fabric delivers the messages and calls immediately.

  • Brokers are responsible for routing messages between clients connected to the message bus. Brokers can be connected to each other (“bridged”) to allow for redundancy, scalability, and communication across different geographical locations.
  • Clients connect to brokers for the purposes of exchanging messages. Communication with brokers is over a TLS-based connection with bi-directional authentication (PKI).
  • McAfee ePO is used to manage McAfee products, including DXL. McAfee ePO maintains the DXL fabric topology information and authorization rules for the fabric, and provides views for visualizing the fabric’s current state.

Get Started

DXL Features

Location unaware, persistent connections, and service- and event-based communications are a few of the key capabilities of DXL.

DXL Integration Types

Learn more about the two primary integration roles: information consumers and information providers.

GitHub OpenDXL Repository

Visit our OpenDXL repository on GitHub to view the documentation, sample codes, and more.

DXL Deployment

Get started by configuring your DXL environment. Customers with grant numbers can download the DXL components.

Download DXL Components

Join our Community

McAfee DXL Community

Questions or concerns about deploying your DXL environment? Stop by our DXL community forum and discuss with our experts.

McAfee Security Innovation Alliance Program

Enter our premier partnership program to receive benefits and support for your integration efforts.