topic XDR and proxy in Cortex XDR Discussions

XDR and proxy

Daniel_Itenberg — Tue, 01 Feb 2022 08:39:34 GMT

Hi all,

I have a bit of a situation - I have a user that IT suspects is experiencing connection problems due ti the xdr agent. the user gets proxy error when opening chrome. However - His endpoint is not isolated, there are no quarantined files relating to network, nor is the firewall component of the xdr enabled on his endpoint(or at all). I suspect the issue is not related to the xdr but i'm not certain of it.

Has anyone encountered this before? are the connection problems related to the xdr?

any help will be appreciated

Re: XDR and proxy

fmoixsante — Tue, 01 Feb 2022 09:59:56 GMT

Hi @Daniel_Itenberg

The Broker's proxy option does not affect the whole network connectivity of your endpoint. The Cortex XDR agent is the only application using the Broker's Proxy.

Did you check the Windows Internet Option to see if there is anything configured there?

In the malware profile, we have the Network Packet Inspection Engine, are you using this module? If yes, did you try to put it in Report mode? or even disabling it?

Re: XDR and proxy

Daniel_Itenberg — Thu, 03 Feb 2022 10:52:44 GMT

The user's laptop died before IT had the option to check it, so i guess that it wasn't related to the xdr