topic Re: Can't register Broker VM in Cortex XDR Discussions

Can't register Broker VM

Justin.Hefley — Tue, 02 Aug 2022 18:51:31 GMT

I downloaded and setup the Broker VM Virtual machine in Hyper V on a server 2016 computer, I log into the IP address, go through the setup steps, test my connection to the time server, then click register and paste the token from the page I got the VM download from and a few seconds later I get an error message.

Any advice would be appreciated.

Justin

Re: Can't register Broker VM

PBurns — Tue, 02 Aug 2022 18:54:18 GMT

It looks like the network the broker vm is on cannot communicate out to distribution.traps.paloaltonetworks.com on port 443. I would check any outbound rules you have i place.

Re: Can't register Broker VM

Justin.Hefley — Tue, 02 Aug 2022 23:11:16 GMT

I opened the network up so it should be letting anything through from my brokerVM server and I get the same message still. I added an SSL Policy rule with the applications cortex-xdr and traps-management-service and left it any to any and allow, just trying to see what is stopping me and can lock it down later.

Thanks for any ideas.

Re: Can't register Broker VM

wechoi — Wed, 03 Aug 2022 09:47:13 GMT

@Justin.Hefley , you may try to verify if the Broker VM is able to resolve and connect to "distributions.traps.paloaltonetworks.com" using command lines:

1. openssl s_client -connect distributions.traps.paloaltonetworks.com:443

2. ping distributions.traps.paloaltonetworks.com

If it doesn't connect, you may want to verify the DNS settings on the Broker VM.