topic Re: Cortex XDR Broker VM (proxy server) in Cortex XDR Discussions

Cortex XDR Broker VM (proxy server)

OrkanAlibayli — Tue, 27 Apr 2021 11:26:01 GMT

Hello.

In XDR Broker VM i enable proxy server and configure as follows:

Type:HTTP

Address: 192.168.6.167

Port: 8080

But it is not work and in configuration status i see "in progress" even through 3-4 hours.

I want to know if is there anybody who configured this proxy successfully and how?

Thanks!

fmoixsante — Tue, 27 Apr 2021 13:16:00 GMT

Are you using the latest version of the BrokerVM, v11.3.13? If yes, are you able to stop it and re-activate the proxy again?

OrkanAlibayli — Tue, 27 Apr 2021 13:26:19 GMT

Yes, i use BrokerVM v11.3.13. I can stop proxy from BrokerVM web UI and reactivate but nothing change. Again i see "in progress" while hours.

iscott — Mon, 10 May 2021 21:17:34 GMT

Can you check the following?:

Obviously review the IP address, Gateway, and Mask.
It is important to have the NTP and DNS configured. In order to resolve the DNS requests and sync with the time in the XDR console.
Be aware of the token. If 24 hours have been passed, the token is invalid.
If you are using a firewall, and it is too restricted, you have to allow URLs and ports from the following link, for the Broker VM IP Address (Required Resources by Region and Broker VM Resources): https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/set-up-endpoint-protection/enable-access-to-cortex-xdr/resources-required-to-enable-access-for-cortex-xdr.html#resources-required-to-enable-access-for-cortex-xdr

Sometimes the steps that I mentioned, do not allow successful communication with XDR Console if aren't configured properly. In my case, was the URLs.

Hope it helps.

Regards,