topic Re: BrokerVM proxy configuration error in Cortex XDR Discussions

BrokerVM proxy configuration error

NCherbib — Wed, 08 Dec 2021 08:39:23 GMT

hello,

i'm facing this issue when i try to configure the ip addresse of the proxy so i can send logs throught brokerVM:

C:\Program Files\Palo Alto Networks\Traps>cytool proxy set "X.X.X.X:YY"

Enter supervisor password:

RpcClient: SendRequest: Error 13: Cloud Defined proxy 'set' internal error = 4 RPC call for proxy command 'set' failed with error, code = 13, message = Cloud D efined proxy 'set' internal error = 4

any help please?

Re: BrokerVM proxy configuration error

eluis — Wed, 08 Dec 2021 12:14:27 GMT

Hi @NCherbib,

please check that config is Ok with the procedure explained in this doc:

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/broker-vm/set-up-broker-vm/activate-the-agent-proxy-for-closed-networks

You will see at the footer of this document some other related documents related to proxy config. Review your configurations to make sure you did not forget something.

Additionally check the following document:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/broker-vm/set-up-broker-vm/configure-your-broker-vm

Check also that you have communications between the endpoint and the broker VM. Ping, or any other tool to make sure that there is a physical network path connecting both devices and there is no FW in the middle dropping your traffic or any other issue with your network communications, even on the endpoint tcp/ip stack, that could cause this error.

If the error persists I would recommend to open a TAC support ticket to investigate further.

Hope this helps,

Luis

Re: BrokerVM proxy configuration error

etugriceri — Wed, 08 Dec 2021 12:19:01 GMT

Dear NCherbib,

Could you check agent status with below command.
cytool runtime query

The error which you shared coming from XDR agent and not directly related with BrokerVM .

if you have any additional security product which is installed on same server, please also check that logs, also please check windows logs.

Re: BrokerVM proxy configuration error

NCherbib — Wed, 08 Dec 2021 13:01:42 GMT

u find bellow the service status, they are runing fine, i will check windows logs and the other security product.

BR.