topic Installed Linux Servers not reflecting in Endpoint in Cortex XDR Discussions

Installed Linux Servers not reflecting in Endpoint

Shashanksinha — Fri, 04 Nov 2022 16:45:21 GMT

Hello ,

There are a few Linux servers in which cortex XDR was deployed but it is not getting reflected in our endpoint.

Performed check-in using the below command for the servers:

root@ubuntu:~$ /opt/traps/bin/cytool checkin

and configured the proxy (Broker VM) on the server using the below command

/opt/traps/bin/cytool proxy set IP:PORT

Still unable to see it in our endpoint.

Please guide how to get those servers in the endpoint.

Re: Installed Linux Servers not reflecting in Endpoint

neelrohit — Sat, 05 Nov 2022 18:29:05 GMT

**Editing the previous comment***

Hi @Shashanksinha ,

Thank you for writing to live community!

For linux endpoints you cannot run the cytool proxy set to set the proxy. The linux endpoints need to have a config file which comes with the installation package and you have to define the proxy in the config file and move it to the etc/panw folder. Then install Cortex XDR agents after that. Also, config files cannot be configured post installation and hence you will have to uninstall the agents and redo the process. As a result of the incorrect installation procedure, the agents are not able to connect to the proxy and hence not to the Cortex XDR cloud to be listed in the endpoints list.

Please go through the Cortex XDR Administration Guide for Linux installation for detailed walkthrough

Hope this answers your question!

Please mark the answer as "Accept as Solution" if it does!

Regards

Re: Installed Linux Servers not reflecting in Endpoint

Shashanksinha — Sat, 05 Nov 2022 16:18:11 GMT

Hi @neelrohit

Thanks for the response .

I had one more query .

I have observed even though the proxy is not set the servers/hosts is shown in the ALL ENDPOINTS .

Regards

Re: Installed Linux Servers not reflecting in Endpoint

neelrohit — Sat, 05 Nov 2022 16:32:46 GMT

Hi @Shashanksinha ,

This is the expected behaviour. Endpoints will connect to the cloud if they have connectivity even without the proxy. The proxy is used only is cases where you have a limitation to open the networks so that XDR agent can connect to the cloud and hence we allow the proxy to act as intermediate source for the agent communication.

Re: Installed Linux Servers not reflecting in Endpoint

Shashanksinha — Sat, 05 Nov 2022 17:57:40 GMT

Hi @neelrohit

if possible could you please let us know why the installed Linux server is not being shown in "ALL ENDPOINTS"

Re: Installed Linux Servers not reflecting in Endpoint

neelrohit — Sat, 05 Nov 2022 18:19:30 GMT

@Shashanksinha ,

Please find my answer above. I am echoing the same comment down below:

Thank you for writing to live community!

Please go through the Cortex XDR Administration Guide for Linux installation for detailed walkthrough

Hope this answers your question!

Please mark the answer as "Accept as Solution" if it does!

Re: Installed Linux Servers not reflecting in Endpoint

neelrohit — Tue, 31 Jan 2023 06:52:08 GMT

@Shashanksinha ,

Please mark the response as "Accept as Solution" if this was able to help you with your query.

Regards