What Changed

Complete replacement of Lumen Threat Feed connector infrastructure:

  • Removed: Deprecated V1.1 connector using Durable Functions architecture
  • Added: New V2 connector with Azure Functions V2 programming model
  • Added: Private networking support template for customers with corporate storage endpoint requirements

Connector Improvements

V2 connector addresses key limitations:

  • API v3 compatibility: Uses new Lumen endpoint with native pagination support, eliminating complex blob storage orchestration
  • Simplified architecture: Single timer-triggered function replaces multi-function Durable Functions workflow
  • Private endpoint support: New ARM template variant supports Function Apps with private storage endpoints
  • Enhanced filtering: Confidence threshold and indicator type filtering at API level
  • Improved reliability: Direct page-by-page processing with automatic retry and exponential backoff

Security Impact (Threat Intelligence)

The V2 connector continues feeding threat intelligence indicators to ThreatIntelligenceIndicator table but with:

  • Same 15-minute sync interval maintained for threat intelligence freshness
  • Improved data fidelity from API v3 pagination vs. V1.1 delta sync approach
  • Enhanced filtering capabilities reduce noise through server-side confidence thresholds

The deprecation of V1.1 means existing deployments must migrate to V2 to continue receiving Lumen threat intelligence updates.

Affected Files

Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/.funcignore
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/.gitignore
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/README.md
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/activity_cleanup_blob/__init__.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/activity_cleanup_blob/function.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/activity_get_manifest_page/__init__.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/activity_get_manifest_page/function.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/activity_upload_from_blob/__init__.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/activity_upload_from_blob/function.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/main.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/orchestrator_function/__init__.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/orchestrator_function/function.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/requirements.txt
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/timer_starter_function/__init__.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/LumenThreatFeedConnector/timer_starter_function/function.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeed/azuredeploy_Connector_LumenThreatFeed_AzureFunction.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2/README.md
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2/__init__.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2/function_app.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2/host.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2/main.py
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2/requirements.txt
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2_ConnectorUI.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/LumenThreatFeedConnectorV2_PrivateNetworking_ConnectorUI.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/azuredeploy_Connector_LumenThreatFeed_AzureFunction_v2.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/azuredeploy_Connector_LumenThreatFeed_AzureFunction_v2_privateendpoint.json
Solutions/Lumen Defender Threat Feed/Data Connectors/LumenThreatFeedv2/azuredeploy_VNet_for_PrivateEndpoint.json
Solutions/Lumen Defender Threat Feed/README.md
(packaging artefacts: 3.2.0.zip, LumenThreatFeedConnector.zip, LumenThreatFeedConnectorv2.zip, ReleaseNotes.md, SolutionMetadata.json, Solution_LumenDefenderThreatFeed.json, createUiDefinition.json, mainTemplate.json)