Endpoint disconnected - Admin console

KirkH — Fri, 22 Oct 2021 09:45:08 GMT

I am having issues with an endpoint connecting to the Cortex XDR dashboard,

The Cortex XDR console from within the OS is showing as 'Enabled' however it is disconnected from the endpoint administrator console.

I have attempted restart the services using cytool function in the command line as per the support document below;

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UZ1CAM&lang=en_US%E2%80%A9

The content version is currently running on 7.5.0.36150, I believe there is a know issue when the endpoint fails to update to a later version and can cause the endpoint to disconnect.

Is there any way to resolve this from the Endpoint administration console without a clean installation?

Re: Endpoint disconnected - Admin console

jcandelaria — Sat, 23 Oct 2021 04:27:06 GMT

Hi KirkH,

Try the solution posted here.... https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/reconnect-disconnected-xdr-clients-remotely-an-easy-way/m-p/420905#M881

If it continues to disconnected and many are affected of the same reconnect-disconnected pattern, kindly submit a support case so PA support can investigate further on the root cause..

topic Endpoint disconnected - Admin console in Cortex XDR Discussions

Endpoint disconnected - Admin console

Re: Endpoint disconnected - Admin console