topic Broker VM questions - Tenant switch for agent in Cortex XDR Discussions

Broker VM questions - Tenant switch for agent

Balaraju — Tue, 12 Jul 2022 11:56:22 GMT

Hello

Please share any experience or advice for below situation and how best to approach this .

Currently agents are connected to UK Cortex XDR tenant via a Broker VM installed on premise . Now the need is to use EU Cortex XDR tenant ,this will be a permanent switch .So can a new Broker VM need to be installed and configured to EU Cortex XDR tenant and then agents be configured to use this new Broker VM ? will this work ? or any other better way is available .

Also should the managing server be changed before changing Broker VM settings on agents or it can be done afterwards ?

Thanks in advance

Re: Broker VM questions - Tenant switch for agent

afurze — Tue, 12 Jul 2022 18:29:21 GMT

Hi Balaraju,

The Broker will not allow connection proxies to another tenant, so the easiest way is to allow your agents to connect directly to the internet for the migration. When you issue the Change Management Server action, they will connect directly to the new Cortex XDR tenant, you can then set a new agent policy to tell the agents to connect to a new Broker which is connected to the new tenant. Alternatively, if you have a more generic forward web proxy server, you can leverage that to proxy connections temporarily for the migration.